Kenan Karalioglu
Security Researcher

TeamViewer’s security bulletins keep you up-to-date with the latest security news and advisories related to our software.
| Bulletin ID | Date Published | Assigned CVE | Title | CVSS | Priority | Affected Products | Last Update |
|---|---|---|---|---|---|---|---|
| TV-2026-1013 — Security Advisory: TeamViewer Response to PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619TV-2026-1013 | Security Advisory: TeamViewer Response to PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 | Informative | |||||
| TV-2026-1012 — Security Update for TeamViewer Remote Management Add-onsTV-2026-1012 | CVE-2026-92375, CVE-2026-92376, CVE-2026-92377, CVE-2026-111582, CVE-2026-111583, CVE-2026-111584 | Security Update for TeamViewer Remote Management Add-ons | Up to 7.8 (High) | Important |
| ||
| TV-2026-1011 — Security Update for Vulnerabilities in TeamViewer ClientsTV-2026-1011 | CVE-2026-92372, CVE-2026-92374, CVE-2026-111585 | Security Update for Vulnerabilities in TeamViewer Clients | Up to 8.8 (High) | Important |
| ||
| TV-2026-1010 — Security Update for Multiple Vulnerabilities in TeamViewer Clients and Related ServicesTV-2026-1010 | CVE-2026-19743, CVE-2026-92368, CVE-2026-92369, CVE-2026-92370, CVE-2026-92371 | Security Update for Multiple Vulnerabilities in TeamViewer Clients and Related Services | Up to 8.8 (High) | Important |
| ||
| TV-2026-1009 — Command Injection in TeamViewer Clients for Linux through Chat Link HandlingTV-2026-1009 | CVE-2026-19042 | Command Injection in TeamViewer Clients for Linux through Chat Link Handling | 8.8 (High) | Important |
| ||
| TV-2026-1008 — Improper Validation of File Paths in TeamViewer Desktop ClientsTV-2026-1008 | CVE-2026-16444 | Improper Validation of File Paths in TeamViewer Desktop Clients | 7.5 (High) | Important |
| ||
| TV-2026-1007 — Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOSTV-2026-1007 | CVE-2026-12703 | Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS | 8.0 (High) | Important |
| ||
| TV-2026-1006 — Vulnerability in TeamViewer out-of-session chatTV-2026-1006 | Vulnerability in TeamViewer out-of-session chat | Informative |
| ||||
| TV-2026-1005 — Broken Access Control in TeamViewer DEX Platform (On‑Premises)TV-2026-1005 | CVE-2026-8381 | Broken Access Control in TeamViewer DEX Platform (On‑Premises) | 5.4 (Medium) | Moderate |
| ||
| TV-2026-1004 — Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)TV-2026-1004 | CVE-2026-2695 | Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises) | 6.3 (Medium) | Moderate |
| ||
| TV-2026-1003 — Access control vulnerability in TeamViewer Full and Host clientsTV-2026-1003 | CVE-2026-23572 | Access control vulnerability in TeamViewer Full and Host clients | 7.2 (High) | Important |
| ||
| TV-2026-1002 — Improper Input and Privilege Handling for Authenticated Users in TeamViewer DEX (former 1E DEX)TV-2026-1002 | CVE-2026-23563, CVE-2026-23571 | Improper Input and Privilege Handling for Authenticated Users in TeamViewer DEX (former 1E DEX) | Up to 6.8 (Medium) | Moderate |
| ||
| TV-2026-1001 — Vulnerabilities in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe)TV-2026-1001 | CVE-2026-23564, CVE-2026-23565, CVE-2026-23566, CVE-2026-23567, CVE-2026-23568, CVE-2026-23569, CVE-2026-23570 | Vulnerabilities in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe) | Up to 6.5 (Medium) | Moderate |
| ||
| TV-2025-1005 — Improper input validation in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe)TV-2025-1005 | CVE-2025-12687, CVE-2025-44016, CVE-2025-46266 | Improper input validation in TeamViewer DEX Client (former 1E Client) – Content Distribution Service (NomadBranch.exe) | Up to 8.8 (High) | Important |
| ||
| TV-2025-1006 — Command Injection and Privilege Escalation vulnerabilities in Teamviewer DEX (former 1E DEX) InstructionsTV-2025-1006 | CVE-2025-64986, CVE-2025-64987, CVE-2025-64988, CVE-2025-64989, CVE-2025-64990, CVE-2025-64991, CVE-2025-64992, CVE-2025-64993, CVE-2025-64994, CVE-2025-64995 | Command Injection and Privilege Escalation vulnerabilities in Teamviewer DEX (former 1E DEX) Instructions | Up to 7.2 (High) | Moderate |
| ||
| TV-2025-1004 — Privilege Escalation via Symbolic Link Spoofing in TeamViewer ClientTV-2025-1004 | CVE-2025-41421 | Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client | 4.7 (Medium) | Moderate |
| ||
| TV-2025-1003 — Arbitrary File Creation via Symbolic Link Leading to Denial-of-ServiceTV-2025-1003 | CVE-2025-44002 | Arbitrary File Creation via Symbolic Link Leading to Denial-of-Service | 6.1 (Medium) | Moderate |
| ||
| TV-2025-1002 — Incorrect Permission Assignment for Critical Resource in TeamViewer Remote ManagementTV-2025-1002 | CVE-2025-36537 | Incorrect Permission Assignment for Critical Resource in TeamViewer Remote Management | 7.0 (High) | Important |
| ||
| 1E-2025-2001 — Symbolic link exploit in 1E client 1E-2025-2001 | CVE-2025-1683 | Symbolic link exploit in 1E client | 7.8 (High) | Important |
| ||
| TV-2025-1001 — Improper Neutralization of Argument Delimiters in TeamViewer ClientsTV-2025-1001 | CVE-2025-0065 | Improper Neutralization of Argument Delimiters in TeamViewer Clients | 7.8 (High) | Important |
| ||
| TV-2024-1008 — Insufficient permissions in the “TeamViewer Patch & Asset Management” componentTV-2024-1008 | CVE-2024-12363 | Insufficient permissions in the “TeamViewer Patch & Asset Management” component | 7.1 (High) | Important |
| ||
| TV-2024-1006 — Improper signature verification of driver installation in TeamViewer Remote clients TV-2024-1006 | CVE-2024-7479, CVE-2024-7481 | Improper signature verification of driver installation in TeamViewer Remote clients | 8.8 (High) | Important |
| ||
| TV-2024-1007 — Improper access control in the clipboard synchronization feature in TeamViewer Remote full client and TeamViewer MeetingTV-2024-1007 | CVE-2024-6053 | Improper access control in the clipboard synchronization feature in TeamViewer Remote full client and TeamViewer Meeting | 4.3 (Medium) | Moderate |
| ||
| 1E-2024-2001 — 1E platform URL redirection1E-2024-2001 | CVE-2024-7211 | 1E platform URL redirection | 4.7 (Medium) | Moderate |
| ||
| TV-2024-1005 — TeamViewer IT security incidentTV-2024-1005 | TeamViewer IT security incident | Informative |
| ||||
| TV-2024-1004 — Improper fingerprint validation in TeamViewer client prior Version 15.54TV-2024-1004 | CVE-2024-2451 | Improper fingerprint validation in TeamViewer client prior Version 15.54 | 6.4 (medium) | Moderate |
| ||
| TV-2024-1003 — XZ Utils backdoor – TeamViewer services are not affectedTV-2024-1003 | CVE-2024-3094 | XZ Utils backdoor – TeamViewer services are not affected | Informative | ||||
| TV-2024-1002 — Improper symlink resolution in TeamViewer Remote client for macOSTV-2024-1002 | CVE-2024-1933 | Improper symlink resolution in TeamViewer Remote client for macOS | 7.1 (high) | Moderate |
| ||
| TV-2024-1001 — Incomplete protection of personal password settingsTV-2024-1001 | CVE-2024-0819 | Incomplete protection of personal password settings | 7.3 (high) | Important |
| ||
| 1E-2023-2006 — Improper Input validation in the end-user interaction product pack available on the 1E exchange1E-2023-2006 | CVE-2023-5964 | Improper Input validation in the end-user interaction product pack available on the 1E exchange | 9.9 (Critical) | Critical |
| ||
| 1E-2023-2003 — Improper input validation in 1E network product pack1E-2023-2003 | CVE-2023-45161 | Improper input validation in 1E network product pack | 9.9 (Critical) | Critical |
| ||
| 1E-2023-2005 — Improper input validation in 1E platform network product pack1E-2023-2005 | CVE-2023-45163 | Improper input validation in 1E platform network product pack | 9.9 (Critical) | Critical |
| ||
| TV-2023-1003 — Libwebp vulnerabilities CVE-2023-4863 and CVE-2023-41064TV-2023-1003 | Libwebp vulnerabilities CVE-2023-4863 and CVE-2023-41064 | Important |
| ||||
| 1E-2023-2004 — Improper neutralization of special elements in 1E platform1E-2023-2004 | CVE-2023-45162 | Improper neutralization of special elements in 1E platform | 9.9 (Critical) | Critical |
| ||
| TV-2023-1002 — Hotfix for curl and libcurl vulnerabilityTV-2023-1002 | CVE-2023-38545 | Hotfix for curl and libcurl vulnerability | Important |
| |||
| 1E-2023-2001 — Improper link resolution in 1E client1E-2023-2001 | CVE-2023-45159 | Improper link resolution in 1E client | 8.4 (High) | Important |
| ||
| 1E-2023-2002 — Insecure file handling in 1E client for windows1E-2023-2002 | CVE-2023-45160 | Insecure file handling in 1E client for windows | 8.8 (High) | Important |
| ||
| TV-2023-1001 — Incomplete protection of local device settingsTV-2023-1001 | CVE-2023-0837 | Incomplete protection of local device settings | 6.6 (medium) | Moderate |
| ||
| TV-2022-1001 — TeamViewer Linux – Deletion command not properly executed after process crashTV-2022-1001 | CVE-2022-23242 | TeamViewer Linux – Deletion command not properly executed after process crash | 6.3 (medium) | Moderate |
| ||
| TV-2022-1002 — Updates for OpenSSL vulnerabilities TV-2022-1002 | CVE-2022-0778 | Updates for OpenSSL vulnerabilities | Moderate |
| |||
| TV-2021-1002 — Server-side hotfix for log4J issueTV-2021-1002 | Server-side hotfix for log4J issue | Low |
| ||||
| TV-2021-1001 — Welcome to the TeamViewer Security BulletinsTV-2021-1001 | Welcome to the TeamViewer Security Bulletins | Informative | |||||
| 1E-2020-2004 — Privilege escalation in 1E client1E-2020-2004 | CVE-2020-16268 | Privilege escalation in 1E client | 8.8 (High) | Important |
| ||
| 1E-2020-2003 — Improper link resolution in 1E client1E-2020-2003 | CVE-2020-27643 | Improper link resolution in 1E client | 6.5 (Medium) | Moderate |
| ||
| 1E-2020-2002 — 1E client enables privilege escalation 1E-2020-2002 | CVE-2020-27644 | 1E client enables privilege escalation | 8.8 (High) | Important |
| ||
| 1E-2020-2001 — Unquoted search path in 1E client1E-2020-2001 | CVE-2020-27645 | Unquoted search path in 1E client | 8.8 (High) | Important |
|
Security Researcher
Cybersecurity Student
Cybersecurity Student
Cybersecurity Student

Security Researcher
Member of E.ON Pentesting Team
TeamViewer’s security team will investigate every submission in our Vulnerability Disclosure Program (VDP).