Read the docs

TeamViewer

Records68All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high45CVSS 7.0–8.9

Exploited now

TeamViewer records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

22 records in Digital Employee Experience · all components

Priority MEDIUM 46

A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted reque…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00301 Published 2025-12-11 Fixed in 25.11.0.29 CWE-20
Priority LOW 36

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-GetCmContentLocations instruction prior V19.2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01161 Published 2025-12-11 Fixed in 19.2 CWE-20
Priority LOW 36

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-CheckSimpleIoC instruction.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01161 Published 2025-12-11 No fix listed CWE-20
Priority LOW 35

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause info…

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00219 Published 2026-01-29 Fixed in 26.1 CWE-125
Priority LOW 35

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instructions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00872 Published 2025-12-11 Fixed in 29, 30 CWE-20
Priority LOW 35

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-PauseNomadJobQueue instruction prior V25.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00872 Published 2025-12-11 Fixed in 25 CWE-20
Priority LOW 35

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00872 Published 2025-12-11 Fixed in 15 CWE-20
Priority LOW 35

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-LogoffUser instruction prior V21.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00828 Published 2025-12-11 Fixed in 21.1 CWE-20
Priority LOW 34

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00213 Published 2025-12-11 Fixed in 25.11.0.29 CWE-20
Priority LOW 33

An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00381 Published 2026-01-29 Fixed in 26.1 CWE-125
Priority LOW 31

Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00233 Published 2026-01-29 Fixed in 26.1 CWE-59
Priority LOW 30

A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tampe…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00673 Published 2026-01-29 Fixed in 26.1 CWE-20
Priority LOW 29

An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to trigg…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00352 Published 2026-01-29 Fixed in 26.1 CWE-122
Priority LOW 28

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00163 Published 2026-01-29 Fixed in 26.1 CWE-20
Priority LOW 28

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause the NomadBranch.exe process…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00188 Published 2026-01-29 Fixed in 26.1 CWE-476
Priority LOW 28

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traff…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00129 Published 2026-01-29 Fixed in 26.1 CWE-319
Priority LOW 28

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbi…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00204 Published 2025-12-11 Fixed in 25.11.0.29 CWE-20
Open these records in search →