Description
A DLL loading vulnerability in the
TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute arbitrary
code with elevated privileges. Exploitation requires user interaction.
Published: 2026-10-27
Score: 7.3 High
EPSS: n/a
KEV: No
Impact: Local privilege escalation
Action: Apply patch
AI Analysis

Impact

A DLL loading flaw exists in the TeamViewer Remote Management Monitoring installer for Windows, affecting all releases prior to version 26.10.1. The vulnerability, classified as CWE-269: Improper Privilege Management, allows a local user with low privileges who can run the installer to execute arbitrary code with elevated rights. This can lead to full system compromise if the attacker gains higher privileges.

Affected Systems

The affected product is TeamViewer Remote Management Monitoring for Windows. Any installation version earlier than 26.10.1 is susceptible; newer releases mitigate the issue.

Risk and Exploitability

The CVSS score of 7.3 indicates a high severity local attack scenario. The exploitation requires user interaction and a legitimate installation environment, which reduces the likelihood of opportunistic attacks but still poses significant risk in environments where low‑privileged users have installer access. EPSS data is not available and the vulnerability is not currently listed in the CISA KEV catalog.

Generated by OpenCVE AI on October 27, 2026 at 16:52 UTC.

Remediation

Vendor Solution

Update to the latest available version.

OpenCVE Recommended Actions

  • Upgrade TeamViewer Remote Management Monitoring to version 26.10.1 or later.
  • Restrict the execution of the installer to administrator accounts only to prevent low‑privileged users from installing the software.
  • Remove or disable any older TeamViewer Monitoring installers from the system to eliminate the vulnerable code base.

Generated by OpenCVE AI on October 27, 2026 at 16:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Description A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction.
Title Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows
Weaknesses CWE-269
References
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: TV

Published:

Updated: 2026-10-27T15:13:13.769Z

Reserved: 2026-10-16T13:05:08.747Z

Link: CVE-2026-111582

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-27T16:17:29.513

Modified: 2026-10-27T16:17:29.513

Link: CVE-2026-111582

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T17:00:07Z

Weaknesses
  • CWE-269

    Improper Privilege Management