TI-2019-13216 Aliases CVE-2019-18196 GHSA-8p9h-vvgj-vx29

A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to…

LOW 31CWE-426Published 2019-10-24 · Updated 2024-08-05

Key facts

Attack vector: Local
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-426.

Summary

A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399), 13.2.36215 (fixed in 13.2.36216), and 14.6.4835 (fixed in 14.7.1965) on Windows could allow an attacker to perform code execution on a target system via a service restart where the DLL was previously installed with administrative privileges. Exploitation requires that an attacker be able to create a new file in the TeamViewer application directory; directory permissions restrict that by default.

Why it matters now

EPSS 0.00633 50th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:teamviewer:teamviewer::::::::	before 11.0.214397; 12.0.0 to before 12.0.214399; 13.0.0 to before 13.2.36216; 14.0.0 to before 14.7.1965	Vulnerable	TeamViewer
cpe:2.3:o:microsoft:windows:-:::::::*	not specified by NVD	Running on	Microsoft

cpe:2.3:a:teamviewer:teamviewer:*:*:*:*:*:*:*:* Versions before 11.0.214397; 12.0.0 to before 12.0.214399; 13.0.0 to before 13.2.36216; 14.0.0 to before 14.7.1965 Vulnerable ·TeamViewer
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2019-18196
2026-10-03 Alias added: GHSA-8p9h-vvgj-vx29
2026-10-25 EPSS moved to the 50th–90th percentile

References

Advisory 1

https://community.teamviewer.com/t5/Announcements/Security-bulletin-CVE-2019-18196/td-p/74564

Other 1

https://safebreach.com/Post/TeamViewer-Windows-Client-v11-to-v14-DLL-Preloading-and-Potential-Abuses-CVE-2019-18196

TI-2019-13681 TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control… KEVCVSS 3.1HIGH 7.0
TI-2020-10745 TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI… CVSS 3.1HIGH 8.8
TI-2010-02989 Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local… CVSS 2.0HIGH 9.3
TI-2021-13849 Memory corruption in TeamViewer CVSS 3.1HIGH 8.8
TI-2018-11870 TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force… CVSS 3.0CRITICAL 9.8
TI-2019-13268 In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with… CVSS 3.1HIGH 8.8

See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences