Is CVE-2026-111583 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-111583 being exploited in the wild.

How severe is CVE-2026-111583?

High severity, with a CVSS score of 7.3, published 27 October 2026.

Which products and versions are affected?

Teamviewer Full Client and Host prior to 15.82 for Windows; legacy versions 15.64, 14.7, 13.2.

Is there a fix for CVE-2026-111583?

Yes: fixed in TeamViewer Full Client and Host 15.82 for Windows. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-111583 attacked?

It is attacked with local access, in a hosted service.

Am I affected by CVE-2026-111583?

Check whether you run Teamviewer Full Client and Host at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-111583: TeamViewer Full Client and Host improper access control in installer staging directory

CVE-2026-111583 · Severity: high · CVSS 7.3 · Published 2026-10-27

TeamViewer Full Client and Host are remote access tools used by IT departments to support computers and networks. A vulnerability in the installer staging directory for the Advanced Asset Management component allows attackers with local user access to place a malicious configuration file that executes with system-level privileges during installation, potentially compromising the entire system. This could enable attackers to deploy ransomware, steal data, or maintain persistent access to affected machines.

Vendors: Teamviewer.

Quick answers

Is CVE-2026-111583 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-111583 being exploited in the wild.
How severe is CVE-2026-111583?: High severity, with a CVSS score of 7.3, published 27 October 2026.
Which products and versions are affected?: Teamviewer Full Client and Host prior to 15.82 for Windows; legacy versions 15.64, 14.7, 13.2.
Is there a fix for CVE-2026-111583?: Yes: fixed in TeamViewer Full Client and Host 15.82 for Windows. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-111583 attacked?: It is attacked with local access, in a hosted service.
Am I affected by CVE-2026-111583?: Check whether you run Teamviewer Full Client and Host at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: TeamViewer Full Client and Host 15.82 for Windows

Technical details

CVE-2026-111583 is an improper access control vulnerability affecting the staging directory used during Advanced Asset Management installer processing on Windows. A locally authenticated attacker with low privileges can craft a malicious installer options file that is processed during service activation, leading to arbitrary command execution as SYSTEM. The vulnerability requires local access but no additional user interaction beyond normal service activation.

Affected products

TeamViewer Full Client and Host prior to 15.82 for Windows; legacy versions 15.64, 14.7, 13.2

Timeline

2026-10-27: disclosed

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.