← Vulnerability feed

Vulnerability record · CVE-2019-18196 · published 24 October 2019

CVE-2019-18196: Teamviewer untrusted search path vulnerability

Teamviewer · Teamviewer

A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399), 13.2.36215 (fixed in 13.2.36216), and 14.6.4835 (fixed in 14.7.1965) on Windows could allow an attacker to perform code execution on a target system via a service restart where the DLL was previously installed with administrative privileges. Exploitation requires that an attacker be able to create a new file in the TeamViewer application directory; directory permissions restrict that by default.

6.7 CVSS 3.1 Medium EPSS 0.63% · top 51.7% CWE-426 · Untrusted search path
6.7CVSS 3.1 base score, v2 6.9
0.63%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

A DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 (fixed in 11.0.214397), 12.0.181268 (fixed in 12.0.214399), 13.2.36215 (fixed in 13.2.36216), and 14.6.4835 (fixed in 14.7.1965) on Windows could allow an attacker to perform code execution on a target system via a service restart where the DLL was previously installed with administrative privileges. Exploitation requires that an attacker be able to create a new file in the TeamViewer application directory; directory permissions restrict that by default.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://community.teamviewer.com/t5/Announcements/Security-bulletin-CVE-2019-18196/td-p/74564 Vendor Advisory
https://safebreach.com/Post/TeamViewer-Windows-Client-v11-to-v14-DLL-Preloading-and-Potential-Abuses-CVE-2019-18196
https://community.teamviewer.com/t5/Announcements/Security-bulletin-CVE-2019-18196/td-p/74564 Vendor Advisory
https://safebreach.com/Post/TeamViewer-Windows-Client-v11-to-v14-DLL-Preloading-and-Potential-Abuses-CVE-2019-18196

Track CVE-2019-18196 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2019-18988TeamViewer Desktop shared AES key bypasses remote-login access controlTeamViewer Desktop through 14.7.1965 uses the same AES key across all customer installations, including for OptionsPasswordAES. Anyone who knows that…KEVEPSS 4.7%analysed9.8CVE-2018-16550Teamviewer vulnerabilityTeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, whi…EPSS 3.6%9.3CVE-2010-3128Teamviewer vulnerabilityUntrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code a…EPSS 8.4%8.8CVE-2021-34859Teamviewer memory buffer overflow vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required …EPSS 8.9%8.8CVE-2020-13699Teamviewer argument injection vulnerabilityTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitr…EPSS 26%8.8CVE-2019-18251Omron cx-supervisor vulnerabilityIn Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vul…EPSS 1.7%8.1CVE-2018-14333Teamviewer information exposure vulnerabilityTeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, w…EPSS 2.6%7.8CVE-2021-34858Teamviewer out-of-bounds read vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required to exploit…EPSS 3.8%

Source: NIST National Vulnerability Database (record CVE-2019-18196), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.