Skip to main content
Servers within data center
TeamViewer Trust Center

Security bulletins

TeamViewer’s security bulletins keep you up-to-date with the latest security news and advisories related to our software.

Security bulletins

Security bulletins
Bulletin IDDate PublishedAssigned CVETitleCVSSPriorityAffected ProductsLast Update
TV-2026-1013 — Security Advisory: TeamViewer Response to PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619TV-2026-1013Security Advisory: TeamViewer Response to PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619Informative
TV-2026-1012 — Security Update for TeamViewer Remote Management Add-onsTV-2026-1012CVE-2026-92375, CVE-2026-92376, CVE-2026-92377, CVE-2026-111582, CVE-2026-111583, CVE-2026-111584Security Update for TeamViewer Remote Management Add-onsUp to 7.8 (High)Important
  • TeamViewer Remote Management Add-ons (Monitoring, Advanced Asset Management, Patch Management)
TV-2026-1011 — Security Update for Vulnerabilities in TeamViewer ClientsTV-2026-1011CVE-2026-92372, CVE-2026-92374, CVE-2026-111585Security Update for Vulnerabilities in TeamViewer ClientsUp to 8.8 (High)Important
  • TeamViewer Remote
  • TeamViewer Tensor
  • TeamViewer ONE
TV-2026-1010 — Security Update for Multiple Vulnerabilities in TeamViewer Clients and Related ServicesTV-2026-1010CVE-2026-19743, CVE-2026-92368, CVE-2026-92369, CVE-2026-92370, CVE-2026-92371Security Update for Multiple Vulnerabilities in TeamViewer Clients and Related ServicesUp to 8.8 (High)Important
  • TeamViewer Remote
  • TeamViewer Tensor
  • TeamViewer ONE
TV-2026-1009 — Command Injection in TeamViewer Clients for Linux through Chat Link HandlingTV-2026-1009CVE-2026-19042Command Injection in TeamViewer Clients for Linux through Chat Link Handling8.8 (High)Important
  • TeamViewer Remote
  • TeamViewer Tensor
  • TeamViewer ONE
TV-2026-1008 — Improper Validation of File Paths in TeamViewer Desktop ClientsTV-2026-1008CVE-2026-16444Improper Validation of File Paths in TeamViewer Desktop Clients7.5 (High)Important
  • TeamViewer Remote
  • TeamViewer Tensor
  • TeamViewer ONE
TV-2026-1007 — Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOSTV-2026-1007CVE-2026-12703Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS8.0 (High)Important
  • TeamViewer Remote
  • TeamViewer Tensor
  • TeamViewer ONE
TV-2026-1006 — Vulnerability in TeamViewer out-of-session chatTV-2026-1006Vulnerability in TeamViewer out-of-session chatInformative
  • TeamViewer Remote
  • TeamViewer Tensor
  • TeamViewer ONE
TV-2026-1005 — Broken Access Control in TeamViewer DEX Platform (On‑Premises)TV-2026-1005CVE-2026-8381Broken Access Control in TeamViewer DEX Platform (On‑Premises)5.4 (Medium)Moderate
  • TeamViewer DEX Platform - On-Premises (formerly 1E DEX)
TV-2026-1004 — Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)TV-2026-1004CVE-2026-2695Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)6.3 (Medium)Moderate
  • TeamViewer DEX Platform - On-Premises (formerly 1E DEX)
TV-2026-1003 — Access control vulnerability in TeamViewer Full and Host clientsTV-2026-1003CVE-2026-23572Access control vulnerability in TeamViewer Full and Host clients7.2 (High)Important
  • TeamViewer Remote
  • TeamViewer Tensor
  • TeamViewer ONE
TV-2026-1002 — Improper Input and Privilege Handling for Authenticated Users in TeamViewer DEX (former 1E DEX)TV-2026-1002CVE-2026-23563, CVE-2026-23571Improper Input and Privilege Handling for Authenticated Users in TeamViewer DEX (former 1E DEX)Up to 6.8 (Medium)Moderate
  • TeamViewer DEX (formerly 1E DEX)
TV-2026-1001 — Vulnerabilities in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe)TV-2026-1001CVE-2026-23564, CVE-2026-23565, CVE-2026-23566, CVE-2026-23567, CVE-2026-23568, CVE-2026-23569, CVE-2026-23570Vulnerabilities in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe)Up to 6.5 (Medium)Moderate
  • TeamViewer DEX (formerly 1E DEX)
TV-2025-1005 — Improper input validation in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe)TV-2025-1005CVE-2025-12687, CVE-2025-44016, CVE-2025-46266Improper input validation in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe)Up to 8.8 (High)Important
  • TeamViewer DEX (formerly 1E DEX)
TV-2025-1006 — Command Injection and Privilege Escalation vulnerabilities in Teamviewer DEX (former 1E DEX) InstructionsTV-2025-1006CVE-2025-64986, CVE-2025-64987, CVE-2025-64988, CVE-2025-64989, CVE-2025-64990, CVE-2025-64991, CVE-2025-64992, CVE-2025-64993, CVE-2025-64994, CVE-2025-64995Command Injection and Privilege Escalation vulnerabilities in Teamviewer DEX (former 1E DEX) InstructionsUp to 7.2 (High)Moderate
  • TeamViewer DEX (formerly 1E DEX)
TV-2025-1004 — Privilege Escalation via Symbolic Link Spoofing in TeamViewer ClientTV-2025-1004CVE-2025-41421Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client4.7 (Medium)Moderate
  • TeamViewer Remote
  • TeamViewer Tensor
TV-2025-1003 — Arbitrary File Creation via Symbolic Link Leading to Denial-of-ServiceTV-2025-1003CVE-2025-44002Arbitrary File Creation via Symbolic Link Leading to Denial-of-Service6.1 (Medium)Moderate
  • TeamViewer Remote Full Client (Windows)
  • TeamViewer Remote Host (Windows)
TV-2025-1002 — Incorrect Permission Assignment for Critical Resource in TeamViewer Remote ManagementTV-2025-1002CVE-2025-36537 Incorrect Permission Assignment for Critical Resource in TeamViewer Remote Management7.0 (High)Important
  • TeamViewer Remote Management (Windows)
1E-2025-2001 — Symbolic link exploit in 1E client 1E-2025-2001CVE-2025-1683Symbolic link exploit in 1E client 7.8 (High)Important
  • 1E Client – Nomad Module
  • 1E Content Distribution Tools v25.1
TV-2025-1001 — Improper Neutralization of Argument Delimiters in TeamViewer ClientsTV-2025-1001CVE-2025-0065Improper Neutralization of Argument Delimiters in TeamViewer Clients7.8 (High)Important
  • TeamViewer Remote
  • TeamViewer Tensor
TV-2024-1008 — Insufficient permissions in the “TeamViewer Patch & Asset Management” componentTV-2024-1008CVE-2024-12363Insufficient permissions in the “TeamViewer Patch & Asset Management” component7.1 (High)Important
  • TeamViewer Remote Management: Patch Management (Windows)
TV-2024-1006 — Improper signature verification of driver installation in TeamViewer Remote clients TV-2024-1006CVE-2024-7479, CVE-2024-7481Improper signature verification of driver installation in TeamViewer Remote clients 8.8 (High) Important
  • TeamViewer Remote
  • TeamViewer Tensor
TV-2024-1007 — Improper access control in the clipboard synchronization feature in TeamViewer Remote full client and TeamViewer MeetingTV-2024-1007CVE-2024-6053Improper access control in the clipboard synchronization feature in TeamViewer Remote full client and TeamViewer Meeting4.3 (Medium)Moderate
  • TeamViewer Meeting
  • TeamViewer full client
1E-2024-2001 — 1E platform URL redirection1E-2024-2001CVE-2024-72111E platform URL redirection4.7 (Medium)Moderate
  • 1E Platform
TV-2024-1005 — TeamViewer IT security incidentTV-2024-1005TeamViewer IT security incidentInformative
  • No product, platform, or customer data affected
TV-2024-1004 — Improper fingerprint validation in TeamViewer client prior Version 15.54TV-2024-1004CVE-2024-2451Improper fingerprint validation in TeamViewer client prior Version 15.546.4 (medium)Moderate
  • TeamViewer Remote full client
  • TeamViewer Remote Host
TV-2024-1003 — XZ Utils backdoor – TeamViewer services are not affectedTV-2024-1003CVE-2024-3094XZ Utils backdoor – TeamViewer services are not affectedInformative
TV-2024-1002 — Improper symlink resolution in TeamViewer Remote client for macOSTV-2024-1002CVE-2024-1933Improper symlink resolution in TeamViewer Remote client for macOS7.1 (high)Moderate
  • TeamViewer Remote client
TV-2024-1001 — Incomplete protection of personal password settingsTV-2024-1001CVE-2024-0819Incomplete protection of personal password settings7.3 (high)Important
  • TeamViewer Remote full client
  • TeamViewer Remote Host
1E-2023-2006 — Improper Input validation in the end-user interaction product pack available on the 1E exchange1E-2023-2006CVE-2023-5964Improper Input validation in the end-user interaction product pack available on the 1E exchange9.9 (Critical)Critical
  • 1E Platform – Exchange Product Pack – End-User Interaction
1E-2023-2003 — Improper input validation in 1E network product pack1E-2023-2003CVE-2023-45161Improper input validation in 1E network product pack9.9 (Critical)Critical
  • 1E Platform – Exchange Product Pack – Network
1E-2023-2005 — Improper input validation in 1E platform network product pack1E-2023-2005CVE-2023-45163Improper input validation in 1E platform network product pack9.9 (Critical)Critical
  • 1E Platform – Exchange Product Pack – Network
TV-2023-1003 — Libwebp vulnerabilities CVE-2023-4863 and CVE-2023-41064TV-2023-1003Libwebp vulnerabilities CVE-2023-4863 and CVE-2023-41064Important
  • TeamViewer Frontline
1E-2023-2004 — Improper neutralization of special elements in 1E platform1E-2023-2004CVE-2023-45162Improper neutralization of special elements in 1E platform9.9 (Critical)Critical
  • 1E Platform
TV-2023-1002 — Hotfix for curl and libcurl vulnerabilityTV-2023-1002CVE-2023-38545Hotfix for curl and libcurl vulnerabilityImportant
  • TeamViewer Remote
  • TeamViewer Tensor
  • TeamViewer Frontline
  • TeamViewer Remote Management
1E-2023-2001 — Improper link resolution in 1E client1E-2023-2001CVE-2023-45159 Improper link resolution in 1E client8.4 (High)Important
  • 1E Client for Windows
1E-2023-2002 — Insecure file handling in 1E client for windows1E-2023-2002CVE-2023-45160Insecure file handling in 1E client for windows8.8 (High)Important
  • 1E Client for Windows
TV-2023-1001 — Incomplete protection of local device settingsTV-2023-1001CVE-2023-0837Incomplete protection of local device settings6.6 (medium)Moderate
  • TeamViewer Remote for Windows
  • TeamViewer Remote for macOS
TV-2022-1001 — TeamViewer Linux – Deletion command not properly executed after process crashTV-2022-1001 CVE-2022-23242TeamViewer Linux – Deletion command not properly executed after process crash6.3 (medium)Moderate
  • TeamViewer for Linux
TV-2022-1002 — Updates for OpenSSL vulnerabilities TV-2022-1002CVE-2022-0778Updates for OpenSSL vulnerabilities Moderate
  • TeamViewer Windows Host IoT
  • TeamViewer IoT Agent for Linux
  • TeamViewer for Linux
  • TeamViewer Android Apps
TV-2021-1002 — Server-side hotfix for log4J issueTV-2021-1002Server-side hotfix for log4J issueLow
  • TeamViewer IoT
  • TeamViewer Engage
  • TeamViewer Frontline
TV-2021-1001 — Welcome to the TeamViewer Security BulletinsTV-2021-1001Welcome to the TeamViewer Security BulletinsInformative
1E-2020-2004 — Privilege escalation in 1E client1E-2020-2004CVE-2020-16268Privilege escalation in 1E client8.8 (High)Important
  • 1E Client for Windows
1E-2020-2003 — Improper link resolution in 1E client1E-2020-2003CVE-2020-27643Improper link resolution in 1E client6.5 (Medium)Moderate
  • 1E Client for Windows
1E-2020-2002 — 1E client enables privilege escalation 1E-2020-2002CVE-2020-276441E client enables privilege escalation 8.8 (High)Important
  • 1E Client for Windows
1E-2020-2001 — Unquoted search path in 1E client1E-2020-2001CVE-2020-27645Unquoted search path in 1E client8.8 (High)Important
  • 1E Client for Windows

Security bulletin priority rating

Critical icon
Critical • Red

A critical priority is assigned to a problem that touches a core function of TeamViewer’s software or services, and that could have a critical impact on your security posture (such as a RCE vulnerability “in the wild”). We recommend following our communication closely and implementing all advised measures. This will likely include an immediate update of the TeamViewer client.

Important
Important • Orange

An important priority is assigned to a problem of TeamViewer’s software or services that could significantly impair your security posture (such as a privilege escalation vulnerability easy to reproduce). We recommend implementing all advised measures. This will likely include an immediate update of the TeamViewer client.

Moderate
Moderate • Yellow

A moderate priority is assigned to a problem of TeamViewer’s software or services that could impair your local security posture only under specific circumstances. We recommend implementing all advised measures. This will likely include an update of the TeamViewer client at the earliest convenience.

Low
Low • Green

A low priority is assigned to a problem that is unlikely to be reproduced and requires privileged local access to be exploited. We recommend implementing all advised measures. This will likely include an update of the TeamViewer client during the next update cycle. The low priority category also includes general security-related announcements by TeamViewer.

Hall of Fame

2026

Recommend icon
Kenan Karalioglu

Security Researcher

2024

Recommend icon
Lukas Radermacher

Cybersecurity Student

Recommend icon
Nils Hanff

Cybersecurity Student

Recommend icon
Aaron Schlitt

Cybersecurity Student

2023

2022

Recommend icon
Mathias Maidana

Security Researcher

2021

Recommend icon
Daniel Szameitat

Member of E.ON Pentesting Team

Do you want to report a security issue?

TeamViewer’s security team will investigate every submission in our Vulnerability Disclosure Program (VDP).