CVE-2019-18196: A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399)…

PriorityP429medium6.7CVSS 3.1

AVLACLPRHUINSUCHIHAH

EPSS

0.63%

45.8th percentile

A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399), 13.2.36215 (fixed in 13.2.36216), and 14.6.4835 (fixed in 14.7.1965) on Windows could allow an attacker to perform code execution on a target system via a service restart where the DLL was previously installed with administrative privileges. Exploitation requires that an attacker be able to create a new file in the TeamViewer application directory; directory permissions restrict that by default.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
teamviewer	teamviewer	< 11.0.214397	11.0.214397
teamviewer	teamviewer	>= 12.0.0 < 12.0.214399	12.0.214399
teamviewer	teamviewer	>= 13.0.0 < 13.2.36216	13.2.36216
teamviewer	teamviewer	>= 14.0.0 < 14.7.1965	14.7.1965

CVSS provenance

nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.