ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2026-92370

TeamViewer Full ClientTeamViewer Host

Remote Session Access Control Bypass Leading to Remote Code Execution

CVSS 3.1
8.8بالا

شرح رسمی (انگلیسی)

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.

امتیازهای CVSS

امتیازنسخهمنبعبردار
8.8بالا 3.1 CVEProject cvelistV5 (CNA) (TV) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
TeamViewer Full Client 13.2.0 (Linux) ≤ v < 13.2.153995 (Linux) CVEProject cvelistV5 (CNA)
TeamViewer Full Client 13.2.0 (MacOS) ≤ v < 13.2.153994 (MacOS) CVEProject cvelistV5 (CNA)
TeamViewer Full Client 13.2.0 (Windows) ≤ v < 13.2.36230 (Windows) CVEProject cvelistV5 (CNA)
TeamViewer Full Client 14.7.0 (Linux) ≤ v < 14.7.48855 (Linux) CVEProject cvelistV5 (CNA)
TeamViewer Full Client 14.7.0 (MacOS) ≤ v < 14.7.48855 (MacOS) CVEProject cvelistV5 (CNA)
TeamViewer Full Client 14.7.0 (Windows) ≤ v < 14.7.48855 (Windows) CVEProject cvelistV5 (CNA)
TeamViewer Full Client 15.0 ≤ v < 15.82 CVEProject cvelistV5 (CNA)
TeamViewer Full Client 15.64.0 (Legacy Windows 7 & 8) ≤ v < 15.64.8 (Legacy Windows 7 & 8) CVEProject cvelistV5 (CNA)
TeamViewer Host 13.2.0 (Linux) ≤ v < 13.2.153995 (Linux) CVEProject cvelistV5 (CNA)
TeamViewer Host 13.2.0 (MacOS) ≤ v < 13.2.153994 (MacOS) CVEProject cvelistV5 (CNA)
TeamViewer Host 13.2.0 (Windows) ≤ v < 13.2.36230 (Windows) CVEProject cvelistV5 (CNA)
TeamViewer Host 14.7.0 (Linux) ≤ v < 14.7.48855 (Linux) CVEProject cvelistV5 (CNA)
TeamViewer Host 14.7.0 (MacOS) ≤ v < 14.7.48855 (MacOS) CVEProject cvelistV5 (CNA)
TeamViewer Host 14.7.0 (Windows) ≤ v < 14.7.48855 (Windows) CVEProject cvelistV5 (CNA)
TeamViewer Host 15.0 ≤ v < 15.82 CVEProject cvelistV5 (CNA)
TeamViewer Host 15.64.0 (Legacy Windows 7 & 8) ≤ v < 15.64.8 (Legacy Windows 7 & 8) CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۷/۰۷
آخرین به‌روزرسانی
۱۴۰۵/۰۷/۰۸
وضعیت
منتشرشده
صادرکننده (CNA)
TV

پیش‌بینی بهره‌برداری (EPSS)

۰٫۴۲٪
احتمال بهره‌برداری در ۳۰ روز
۳۶٫۶٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-284
    Improper Access Control