CVE-2026-111583

high

Description

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-111079

Details

Source: Mitre, NVD

Published: 2026-10-27

Updated: 2026-10-28

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.3

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00193