{"affected":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Full Client","source":"CNA: TV","vendor":"TeamViewer","versions":[{"lessThan":"15.82","status":"affected","version":"0","versionType":"custom"},{"lessThan":"15.64.10 (Legacy Windows 7 & 8)","status":"affected","version":"15.64.0 (Legacy Windows 7 & 8)","versionType":"custom"},{"lessThan":"14.7.48868","status":"affected","version":"14.7.0","versionType":"custom"},{"lessThan":"13.2.36231","status":"affected","version":"13.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Host","source":"CNA: TV","vendor":"TeamViewer","versions":[{"lessThan":"15.82","status":"affected","version":"0","versionType":"custom"},{"lessThan":"15.64.10 (Legacy Windows 7 & 8)","status":"affected","version":"15.64.0 (Legacy Windows 7 & 8)","versionType":"custom"},{"lessThan":"14.7.48868","status":"affected","version":"14.7.0","versionType":"custom"},{"lessThan":"13.2.36231","status":"affected","version":"13.2.0","versionType":"custom"}]}],"cveId":"CVE-2026-92377","cwes":["CWE-732"],"description":"Improper access control in the Patch\nManagement update mechanism of TeamViewer Full Client and Host for Windows\nprior to version 15.82 allows a local authenticated attacker with low\nprivileges to supply a signed executable through a forged IPC response and\ncause it to load a malicious DLL from a user-writable temporary directory.\nSuccessful exploitation results in arbitrary code execution with NT\nAUTHORITY\\SYSTEM privileges.","epss":{"date":"2026-11-04","percentile":0.01246,"score":0.00109},"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: TV","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793824079752,"publishedAt":1793113915955,"references":[{"source":"CNA: TV","tags":["vendor-advisory"],"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"}],"remediation":[{"kind":"fix","source":"CNA: TV","text":"Update to the latest available version."}],"revision":"15cce014e2b9556653188fc54355b4e96b9e0475d30908571ea0c2893e9b4588","sources":[{"modifiedAt":1793824079752,"name":"CNA: TV","retrievedAt":1793826774676,"url":"https://www.cve.org/CVERecord?id=CVE-2026-92377"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793826782195,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-92377"}],"ssvc":{"assessedAt":1793817949190,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows","updatedAt":1793826782195}