TeamViewer Remote vulnerabilities

Latest TeamViewer Remote CVEs

Newest publication first

1. CVE-2026-12703 Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS

   Published 2026-07-29

   High·CVSS 8.0 EPSS 0.40%

   TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host.

2. CVE-2026-23572 Improper Access Control in TeamViewer clients

   Published 2026-02-05

   High·CVSS 7.2 EPSS 0.32%

   Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthoriz...

3. CVE-2024-2451 Improper fingerprint validation in the TeamViewer Client

   Published 2024-05-28

   Medium·CVSS 6.4 EPSS 0.11%

   Improper fingerprint validation in the TeamViewer Client (Full & Host) prior Version 15.54 for Windows and macOS allows an attacker with administrative user rights to further elevate privileges via executable sideloading.

4. CVE-2024-0819 Incomplete protection of personal password settings

   Published 2024-02-27

   High·CVSS 7.8 EPSS 0.20%

   Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to elevate privileges by changing the personal password setting and establishing a remote connection to a logged-in admin accoun...

5. CVE-2023-0837 An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged user to change basic local device settings....

   Published 2023-06-14

   Medium·CVSS 5.5 EPSS 0.25%

   An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged user to change basic local device settings even though the options were locked. This can result in unwanted changes to the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.