Kenan Karalioglu
Security Researcher
TeamViewer Trust Center
Security bulletins
TeamViewer’s security bulletins keep you up-to-date with the latest security news and advisories related to our software.
Report a security issue
TeamViewer’s security team will investigate every submission in our Vulnerability Disclosure Program.
Understand our security bulletins
For reference, TeamViewer ranks security bulletins with priority levels from low to critical.
Subscribe to updates
Stay up-to-date and receive all TeamViewer security bulletins directly via email.
Security bulletins
| Bulletin ID | Date Published | Assigned CVE | Title | CVSS | Priority | Affected Products | Last Update |
|---|---|---|---|---|---|---|---|
| TV-2026-1013 — Security Advisory: TeamViewer Response to PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619TV-2026-1013 | Security Advisory: TeamViewer Response to PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 | Informative | |||||
| TV-2026-1012 — Security Update for TeamViewer Remote Management Add-onsTV-2026-1012 | CVE-2026-92375, CVE-2026-92376, CVE-2026-92377, CVE-2026-111582, CVE-2026-111583, CVE-2026-111584 | Security Update for TeamViewer Remote Management Add-ons | Up to 7.8 (High) | Important |
| ||
| TV-2026-1011 — Security Update for Vulnerabilities in TeamViewer ClientsTV-2026-1011 | CVE-2026-92372, CVE-2026-92374, CVE-2026-111585 | Security Update for Vulnerabilities in TeamViewer Clients | Up to 8.8 (High) | Important |
| ||
| TV-2026-1010 — Security Update for Multiple Vulnerabilities in TeamViewer Clients and Related ServicesTV-2026-1010 | CVE-2026-19743, CVE-2026-92368, CVE-2026-92369, CVE-2026-92370, CVE-2026-92371 | Security Update for Multiple Vulnerabilities in TeamViewer Clients and Related Services | Up to 8.8 (High) | Important |
| ||
| TV-2026-1009 — Command Injection in TeamViewer Clients for Linux through Chat Link HandlingTV-2026-1009 | CVE-2026-19042 | Command Injection in TeamViewer Clients for Linux through Chat Link Handling | 8.8 (High) | Important |
| ||
| TV-2026-1008 — Improper Validation of File Paths in TeamViewer Desktop ClientsTV-2026-1008 | CVE-2026-16444 | Improper Validation of File Paths in TeamViewer Desktop Clients | 7.5 (High) | Important |
| ||
| TV-2026-1007 — Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOSTV-2026-1007 | CVE-2026-12703 | Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS | 8.0 (High) | Important |
| ||
| TV-2026-1006 — Vulnerability in TeamViewer out-of-session chatTV-2026-1006 | Vulnerability in TeamViewer out-of-session chat | Informative |
| ||||
| TV-2026-1005 — Broken Access Control in TeamViewer DEX Platform (On‑Premises)TV-2026-1005 | CVE-2026-8381 | Broken Access Control in TeamViewer DEX Platform (On‑Premises) | 5.4 (Medium) | Moderate |
| ||
| TV-2026-1004 — Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)TV-2026-1004 | CVE-2026-2695 | Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises) | 6.3 (Medium) | Moderate |
| ||
| TV-2026-1003 — Access control vulnerability in TeamViewer Full and Host clientsTV-2026-1003 | CVE-2026-23572 | Access control vulnerability in TeamViewer Full and Host clients | 7.2 (High) | Important |
| ||
| TV-2026-1002 — Improper Input and Privilege Handling for Authenticated Users in TeamViewer DEX (former 1E DEX)TV-2026-1002 | CVE-2026-23563, CVE-2026-23571 | Improper Input and Privilege Handling for Authenticated Users in TeamViewer DEX (former 1E DEX) | Up to 6.8 (Medium) | Moderate |
| ||
| TV-2026-1001 — Vulnerabilities in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe)TV-2026-1001 | CVE-2026-23564, CVE-2026-23565, CVE-2026-23566, CVE-2026-23567, CVE-2026-23568, CVE-2026-23569, CVE-2026-23570 | Vulnerabilities in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe) | Up to 6.5 (Medium) | Moderate |
| ||
| TV-2025-1005 — Improper input validation in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe)TV-2025-1005 | CVE-2025-12687, CVE-2025-44016, CVE-2025-46266 | Improper input validation in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe) | Up to 8.8 (High) | Important |
| ||
| TV-2025-1006 — Command Injection and Privilege Escalation vulnerabilities in Teamviewer DEX (former 1E DEX) InstructionsTV-2025-1006 | CVE-2025-64986, CVE-2025-64987, CVE-2025-64988, CVE-2025-64989, CVE-2025-64990, CVE-2025-64991, CVE-2025-64992, CVE-2025-64993, CVE-2025-64994, CVE-2025-64995 | Command Injection and Privilege Escalation vulnerabilities in Teamviewer DEX (former 1E DEX) Instructions | Up to 7.2 (High) | Moderate |
| ||
| TV-2025-1004 — Privilege Escalation via Symbolic Link Spoofing in TeamViewer ClientTV-2025-1004 | CVE-2025-41421 | Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client | 4.7 (Medium) | Moderate |
| ||
| TV-2025-1003 — Arbitrary File Creation via Symbolic Link Leading to Denial-of-ServiceTV-2025-1003 | CVE-2025-44002 | Arbitrary File Creation via Symbolic Link Leading to Denial-of-Service | 6.1 (Medium) | Moderate |
| ||
| TV-2025-1002 — Incorrect Permission Assignment for Critical Resource in TeamViewer Remote ManagementTV-2025-1002 | CVE-2025-36537 | Incorrect Permission Assignment for Critical Resource in TeamViewer Remote Management | 7.0 (High) | Important |
| ||
| 1E-2025-2001 — Symbolic link exploit in 1E client 1E-2025-2001 | CVE-2025-1683 | Symbolic link exploit in 1E client | 7.8 (High) | Important |
| ||
| TV-2025-1001 — Improper Neutralization of Argument Delimiters in TeamViewer ClientsTV-2025-1001 | CVE-2025-0065 | Improper Neutralization of Argument Delimiters in TeamViewer Clients | 7.8 (High) | Important |
| ||
| TV-2024-1008 — Insufficient permissions in the “TeamViewer Patch & Asset Management” componentTV-2024-1008 | CVE-2024-12363 | Insufficient permissions in the “TeamViewer Patch & Asset Management” component | 7.1 (High) | Important |
| ||
| TV-2024-1006 — Improper signature verification of driver installation in TeamViewer Remote clients TV-2024-1006 | CVE-2024-7479, CVE-2024-7481 | Improper signature verification of driver installation in TeamViewer Remote clients | 8.8 (High) | Important |
| ||
| TV-2024-1007 — Improper access control in the clipboard synchronization feature in TeamViewer Remote full client and TeamViewer MeetingTV-2024-1007 | CVE-2024-6053 | Improper access control in the clipboard synchronization feature in TeamViewer Remote full client and TeamViewer Meeting | 4.3 (Medium) | Moderate |
| ||
| 1E-2024-2001 — 1E platform URL redirection1E-2024-2001 | CVE-2024-7211 | 1E platform URL redirection | 4.7 (Medium) | Moderate |
| ||
| TV-2024-1005 — TeamViewer IT security incidentTV-2024-1005 | TeamViewer IT security incident | Informative |
| ||||
| TV-2024-1004 — Improper fingerprint validation in TeamViewer client prior Version 15.54TV-2024-1004 | CVE-2024-2451 | Improper fingerprint validation in TeamViewer client prior Version 15.54 | 6.4 (medium) | Moderate |
| ||
| TV-2024-1003 — XZ Utils backdoor – TeamViewer services are not affectedTV-2024-1003 | CVE-2024-3094 | XZ Utils backdoor – TeamViewer services are not affected | Informative | ||||
| TV-2024-1002 — Improper symlink resolution in TeamViewer Remote client for macOSTV-2024-1002 | CVE-2024-1933 | Improper symlink resolution in TeamViewer Remote client for macOS | 7.1 (high) | Moderate |
| ||
| TV-2024-1001 — Incomplete protection of personal password settingsTV-2024-1001 | CVE-2024-0819 | Incomplete protection of personal password settings | 7.3 (high) | Important |
| ||
| 1E-2023-2006 — Improper Input validation in the end-user interaction product pack available on the 1E exchange1E-2023-2006 | CVE-2023-5964 | Improper Input validation in the end-user interaction product pack available on the 1E exchange | 9.9 (Critical) | Critical |
| ||
| 1E-2023-2003 — Improper input validation in 1E network product pack1E-2023-2003 | CVE-2023-45161 | Improper input validation in 1E network product pack | 9.9 (Critical) | Critical |
| ||
| 1E-2023-2005 — Improper input validation in 1E platform network product pack1E-2023-2005 | CVE-2023-45163 | Improper input validation in 1E platform network product pack | 9.9 (Critical) | Critical |
| ||
| TV-2023-1003 — Libwebp vulnerabilities CVE-2023-4863 and CVE-2023-41064TV-2023-1003 | Libwebp vulnerabilities CVE-2023-4863 and CVE-2023-41064 | Important |
| ||||
| 1E-2023-2004 — Improper neutralization of special elements in 1E platform1E-2023-2004 | CVE-2023-45162 | Improper neutralization of special elements in 1E platform | 9.9 (Critical) | Critical |
| ||
| TV-2023-1002 — Hotfix for curl and libcurl vulnerabilityTV-2023-1002 | CVE-2023-38545 | Hotfix for curl and libcurl vulnerability | Important |
| |||
| 1E-2023-2001 — Improper link resolution in 1E client1E-2023-2001 | CVE-2023-45159 | Improper link resolution in 1E client | 8.4 (High) | Important |
| ||
| 1E-2023-2002 — Insecure file handling in 1E client for windows1E-2023-2002 | CVE-2023-45160 | Insecure file handling in 1E client for windows | 8.8 (High) | Important |
| ||
| TV-2023-1001 — Incomplete protection of local device settingsTV-2023-1001 | CVE-2023-0837 | Incomplete protection of local device settings | 6.6 (medium) | Moderate |
| ||
| TV-2022-1001 — TeamViewer Linux – Deletion command not properly executed after process crashTV-2022-1001 | CVE-2022-23242 | TeamViewer Linux – Deletion command not properly executed after process crash | 6.3 (medium) | Moderate |
| ||
| TV-2022-1002 — Updates for OpenSSL vulnerabilities TV-2022-1002 | CVE-2022-0778 | Updates for OpenSSL vulnerabilities | Moderate |
| |||
| TV-2021-1002 — Server-side hotfix for log4J issueTV-2021-1002 | Server-side hotfix for log4J issue | Low |
| ||||
| TV-2021-1001 — Welcome to the TeamViewer Security BulletinsTV-2021-1001 | Welcome to the TeamViewer Security Bulletins | Informative | |||||
| 1E-2020-2004 — Privilege escalation in 1E client1E-2020-2004 | CVE-2020-16268 | Privilege escalation in 1E client | 8.8 (High) | Important |
| ||
| 1E-2020-2003 — Improper link resolution in 1E client1E-2020-2003 | CVE-2020-27643 | Improper link resolution in 1E client | 6.5 (Medium) | Moderate |
| ||
| 1E-2020-2002 — 1E client enables privilege escalation 1E-2020-2002 | CVE-2020-27644 | 1E client enables privilege escalation | 8.8 (High) | Important |
| ||
| 1E-2020-2001 — Unquoted search path in 1E client1E-2020-2001 | CVE-2020-27645 | Unquoted search path in 1E client | 8.8 (High) | Important |
|
Security bulletin priority rating
Critical • Red
A critical priority is assigned to a problem that touches a core function of TeamViewer’s software or services, and that could have a critical impact on your security posture (such as a RCE vulnerability “in the wild”). We recommend following our communication closely and implementing all advised measures. This will likely include an immediate update of the TeamViewer client.
Important • Orange
An important priority is assigned to a problem of TeamViewer’s software or services that could significantly impair your security posture (such as a privilege escalation vulnerability easy to reproduce). We recommend implementing all advised measures. This will likely include an immediate update of the TeamViewer client.
Moderate • Yellow
A moderate priority is assigned to a problem of TeamViewer’s software or services that could impair your local security posture only under specific circumstances. We recommend implementing all advised measures. This will likely include an update of the TeamViewer client at the earliest convenience.
Low • Green
A low priority is assigned to a problem that is unlikely to be reproduced and requires privileged local access to be exploited. We recommend implementing all advised measures. This will likely include an update of the TeamViewer client during the next update cycle. The low priority category also includes general security-related announcements by TeamViewer.
Hall of Fame
2026
2024
Lukas Radermacher
Cybersecurity Student
Nils Hanff
Cybersecurity Student
Aaron Schlitt
Cybersecurity Student
2023
Galih Ramadhan Yusanto
2022
Mathias Maidana
Security Researcher
WildZarek
2021
Daniel Szameitat
Member of E.ON Pentesting Team
Eric Taylor
Tolgahan Demirayak
Do you want to report a security issue?
TeamViewer’s security team will investigate every submission in our Vulnerability Disclosure Program (VDP).