https://vulnogram.org/ Most recent CVEs assigned by tv (tv). https://vulnogram.org/seaview/icons/tv.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-92370 https://vulnogram.org/CVE-2026-92370 An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By… High Network Exploitable Tue, 29 Sep 2026 15:42:27 GMT https://vulnogram.org/CVE-2026-92371 https://vulnogram.org/CVE-2026-92371 TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a l… High Tue, 29 Sep 2026 15:41:12 GMT https://vulnogram.org/CVE-2026-92368 https://vulnogram.org/CVE-2026-92368 TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in… High Tue, 29 Sep 2026 15:40:30 GMT https://vulnogram.org/CVE-2026-92369 https://vulnogram.org/CVE-2026-92369 TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory bef… High Tue, 29 Sep 2026 15:39:53 GMT https://vulnogram.org/CVE-2026-19743 https://vulnogram.org/CVE-2026-19743 Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (… High Tue, 29 Sep 2026 15:39:11 GMT https://vulnogram.org/CVE-2026-19042 https://vulnogram.org/CVE-2026-19042 A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-sess… High Network Exploitable Wed, 26 Aug 2026 09:16:13 GMT https://vulnogram.org/CVE-2026-16444 https://vulnogram.org/CVE-2026-16444 Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual fi… High Network Exploitable Wed, 26 Aug 2026 09:10:16 GMT https://vulnogram.org/CVE-2026-12703 https://vulnogram.org/CVE-2026-12703 TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to… High Wed, 29 Jul 2026 14:13:19 GMT https://vulnogram.org/CVE-2026-8381 https://vulnogram.org/CVE-2026-8381 A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform ac… Medium Fri, 22 May 2026 08:29:16 GMT https://vulnogram.org/CVE-2026-2695 https://vulnogram.org/CVE-2026-2695 A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject comm… Medium Wed, 13 May 2026 16:09:08 GMT https://vulnogram.org/CVE-2026-23572 https://vulnogram.org/CVE-2026-23572 Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An expl… High Thu, 05 Feb 2026 11:51:20 GMT https://vulnogram.org/CVE-2026-23570 https://vulnogram.org/CVE-2026-23570 A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via craf… Medium Thu, 29 Jan 2026 08:50:52 GMT https://vulnogram.org/CVE-2026-23569 https://vulnogram.org/CVE-2026-23569 An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a craf… Medium Thu, 29 Jan 2026 08:49:32 GMT https://vulnogram.org/CVE-2026-23568 https://vulnogram.org/CVE-2026-23568 An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-o… Medium Thu, 29 Jan 2026 08:48:17 GMT https://vulnogram.org/CVE-2026-23567 https://vulnogram.org/CVE-2026-23567 An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to trigger a heap-based buffer overflo… Medium Thu, 29 Jan 2026 08:47:13 GMT https://vulnogram.org/CVE-2026-23566 https://vulnogram.org/CVE-2026-23566 A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \Nomad Branch.log v… Medium Thu, 29 Jan 2026 08:46:02 GMT https://vulnogram.org/CVE-2026-23565 https://vulnogram.org/CVE-2026-23565 A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause the NomadBranch.exe process to terminate via crafted reque… Medium Thu, 29 Jan 2026 08:44:58 GMT https://vulnogram.org/CVE-2026-23564 https://vulnogram.org/CVE-2026-23564 A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. Th… Medium Thu, 29 Jan 2026 08:43:43 GMT https://vulnogram.org/CVE-2026-23571 https://vulnogram.org/CVE-2026-23571 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arb… Medium Thu, 29 Jan 2026 08:41:45 GMT https://vulnogram.org/CVE-2026-23563 https://vulnogram.org/CVE-2026-23563 Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a c… Medium Thu, 29 Jan 2026 08:39:56 GMT https://vulnogram.org/CVE-2025-64995 https://vulnogram.org/CVE-2025-64995 A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local device… Medium Thu, 11 Dec 2025 11:29:50 GMT https://vulnogram.org/CVE-2025-64994 https://vulnogram.org/CVE-2025-64994 A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-SetWorkRate instruction prior V17.1. The improper handling of executable search paths could allow local attackers with write acces… Medium Thu, 11 Dec 2025 11:29:37 GMT https://vulnogram.org/CVE-2025-64993 https://vulnogram.org/CVE-2025-64993 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arb… Medium Thu, 11 Dec 2025 11:29:09 GMT https://vulnogram.org/CVE-2025-64992 https://vulnogram.org/CVE-2025-64992 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-PauseNomadJobQueue instruction prior V25. Improper input validation, allowing authenticated attackers with Actioner privileges to inj… Medium Thu, 11 Dec 2025 11:28:53 GMT https://vulnogram.org/CVE-2025-64991 https://vulnogram.org/CVE-2025-64991 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15. Improper input validation, allowing authenticated attackers with Actioner privileges to inject… Medium Thu, 11 Dec 2025 11:28:16 GMT https://vulnogram.org/CVE-2025-64990 https://vulnogram.org/CVE-2025-64990 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-LogoffUser instruction prior V21.1. Improper input validation, allowing authenticated attackers with Actioner privileg… Medium Thu, 11 Dec 2025 11:27:42 GMT https://vulnogram.org/CVE-2025-64989 https://vulnogram.org/CVE-2025-64989 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-FindFileBySizeAndHash instruction prior V21.1. Improper input validation, allowing authenticated attackers with Action… High Thu, 11 Dec 2025 11:27:10 GMT https://vulnogram.org/CVE-2025-64988 https://vulnogram.org/CVE-2025-64988 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-GetCmContentLocations instruction prior V19.2. Improper input validation, allowing authenticated attackers with Actioner privileges t… High Thu, 11 Dec 2025 11:26:48 GMT https://vulnogram.org/CVE-2025-64987 https://vulnogram.org/CVE-2025-64987 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-CheckSimpleIoC instruction. Improper input validation, allowing authenticated attackers with Actioner privileges to in… High Thu, 11 Dec 2025 11:26:34 GMT https://vulnogram.org/CVE-2025-64986 https://vulnogram.org/CVE-2025-64986 A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input validation, allowing authenticated attackers with Action… High Thu, 11 Dec 2025 11:26:13 GMT https://vulnogram.org/CVE-2025-46266 https://vulnogram.org/CVE-2025-46266 A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, pot… Medium Thu, 11 Dec 2025 11:25:11 GMT https://vulnogram.org/CVE-2025-44016 https://vulnogram.org/CVE-2025-44016 A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash… High Thu, 11 Dec 2025 11:24:37 GMT https://vulnogram.org/CVE-2025-12687 https://vulnogram.org/CVE-2025-12687 A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in… Medium Thu, 11 Dec 2025 11:24:15 GMT https://vulnogram.org/CVE-2025-41421 https://vulnogram.org/CVE-2025-41421 Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection t… Medium Wed, 01 Oct 2025 13:48:38 GMT https://vulnogram.org/CVE-2025-44002 https://vulnogram.org/CVE-2025-44002 Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service conditio… Medium Tue, 26 Aug 2025 11:05:22 GMT https://vulnogram.org/CVE-2025-36537 https://vulnogram.org/CVE-2025-36537 Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges v… High Tue, 24 Jun 2025 14:24:08 GMT https://vulnogram.org/CVE-2025-0065 https://vulnogram.org/CVE-2025-0065 Improper Neutralization of Argument Delimiters in the TeamViewer_service.exe component of TeamViewer Clients prior version 15.62 for Windows allows an attacker with local unprivileged access on a Windows system to elevate privileges via argument inje… High Tue, 28 Jan 2025 10:22:12 GMT https://vulnogram.org/CVE-2024-12363 https://vulnogram.org/CVE-2024-12363 Insufficient permissions in the TeamViewer Patch & Asset Management component prior to version 24.12 on Windows allows a local authenticated user to delete arbitrary files. TeamViewer Patch & Asset Management is part of TeamViewer Remote Management. High Wed, 11 Dec 2024 09:32:04 GMT https://vulnogram.org/CVE-2024-7479 https://vulnogram.org/CVE-2024-7479 Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Window… High Wed, 25 Sep 2024 10:34:08 GMT https://vulnogram.org/CVE-2024-7481 https://vulnogram.org/CVE-2024-7481 Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Wi… High Wed, 25 Sep 2024 10:33:12 GMT https://vulnogram.org/CVE-2024-6053 https://vulnogram.org/CVE-2024-6053 Improper access control in the clipboard synchronization feature in TeamViewer Full Client prior version 15.57 and TeamViewer Meeting prior version 15.55.3 can lead to unintentional sharing of the clipboard with the current presenter of a meeting. Medium Network Exploitable Wed, 28 Aug 2024 16:30:58 GMT https://vulnogram.org/CVE-2024-2451 https://vulnogram.org/CVE-2024-2451 Improper fingerprint validation in the TeamViewer Client (Full & Host) prior Version 15.54 for Windows and macOS allows an attacker with administrative user rights to further elevate privileges via executable sideloading. Medium Tue, 28 May 2024 14:27:25 GMT https://vulnogram.org/CVE-2024-1933 https://vulnogram.org/CVE-2024-1933 Insecure UNIX Symbolic Link (Symlink) Following in TeamViewer Remote Client prior Version 15.52 for macOS allows an attacker with unprivileged access, to potentially elevate privileges or conduct a denial-of-service-attack by overwriting the symlink. High Tue, 26 Mar 2024 12:47:11 GMT https://vulnogram.org/CVE-2024-0819 https://vulnogram.org/CVE-2024-0819 Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to elevate privileges by changing the personal password setting and establishing a remote connecti… High Tue, 27 Feb 2024 14:07:24 GMT https://vulnogram.org/CVE-2023-0837 https://vulnogram.org/CVE-2023-0837 An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged user to change basic local device settings even though the options were locked. This can resu… Medium Wed, 14 Jun 2023 07:01:10 GMT https://vulnogram.org/CVE-2022-23242 https://vulnogram.org/CVE-2022-23242 TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection pass… Medium Wed, 23 Mar 2022 15:18:25 GMT