Improper Access Control in TeamViewer Full Client and Host for Windows

CVE-2026-92377

What is CVE-2026-92377?

A vulnerability exists within the Patch Management update mechanism of TeamViewer Full Client and Host for Windows that allows a local authenticated attacker with limited privileges to exploit the system. By sending a crafted IPC response, the attacker can supply a signed executable, resulting in the compromised loading of a malicious DLL from a user-writable temporary directory. This exploitation can lead to the execution of arbitrary code at elevated privileges, potentially allowing full control over the affected system.

References