جزئیات آسیب‌پذیری
CVE-2026-19743
TeamViewer Full ClientTeamViewer Host
Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients
CVSS 3.1
7.8بالا
شرح رسمی (انگلیسی)
Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (TV) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| TeamViewer | Full Client | 13.2.0 (Linux) ≤ v < 13.2.153995 (Linux) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Full Client | 13.2.0 (MacOS) ≤ v < 13.2.153994 (MacOS) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Full Client | 13.2.0 (Windows) ≤ v < 13.2.36230 (Windows) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Full Client | 14.7.0 (Linux) ≤ v < 14.7.48855 (Linux) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Full Client | 14.7.0 (MacOS) ≤ v < 14.7.48855 (MacOS) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Full Client | 14.7.0 (Windows) ≤ v < 14.7.48855 (Windows) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Full Client | 15.0 ≤ v < 15.82 | CVEProject cvelistV5 (CNA) |
| TeamViewer | Full Client | 15.64.0 (Legacy Windows 7 & 8) ≤ v < 15.64.8 (Legacy Windows 7 & 8) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Host | 13.2.0 (Linux) ≤ v < 13.2.153995 (Linux) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Host | 13.2.0 (MacOS) ≤ v < 13.2.153994 (MacOS) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Host | 13.2.0 (Windows) ≤ v < 13.2.36230 (Windows) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Host | 14.7.0 (Linux) ≤ v < 14.7.48855 (Linux) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Host | 14.7.0 (MacOS) ≤ v < 14.7.48855 (MacOS) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Host | 14.7.0 (Windows) ≤ v < 14.7.48855 (Windows) | CVEProject cvelistV5 (CNA) |
| TeamViewer | Host | 15.0 ≤ v < 15.82 | CVEProject cvelistV5 (CNA) |
| TeamViewer | Host | 15.64.0 (Legacy Windows 7 & 8) ≤ v < 15.64.8 (Legacy Windows 7 & 8) | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۷/۰۷
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۷/۰۸
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- TV
پیش‌بینی بهره‌برداری (EPSS)
۰٫۱۴٪
احتمال بهره‌برداری در ۳۰ روز
۳٫۸٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')