← Vulnerability feed

Vulnerability record · CVE-2019-19362 · published 2 December 2019

CVE-2019-19362: Teamviewer vulnerability

Teamviewer · Teamviewer

An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every communication is saved within Windows main memory. When a user logs out or deletes conversation history (but does not exit the application), this data is not wiped from main memory, and therefore could be read by a local user with the same or greater privileges.

6.5 CVSS 3.1 Medium EPSS 2.1% · top 19.3% CWE-212 · CWE-212
6.5CVSS 3.1 base score, v2 4.0
2.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every communication is saved within Windows main memory. When a user logs out or deletes conversation history (but does not exit the application), this data is not wiped from main memory, and therefore could be read by a local user with the same or greater privileges.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://nestedif.com/teamviewer-vulnerability-improper-session-handling-leading-to-information-disclosure-advisory/ ExploitThird Party AdvisoryURL Repurposed
http://nestedif.com/teamviewer-vulnerability-improper-session-handling-leading-to-information-disclosure-advisory/ ExploitThird Party AdvisoryURL Repurposed

Track CVE-2019-19362 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2019-18988TeamViewer Desktop shared AES key bypasses remote-login access controlTeamViewer Desktop through 14.7.1965 uses the same AES key across all customer installations, including for OptionsPasswordAES. Anyone who knows that…KEVEPSS 4.7%analysed9.8CVE-2018-16550Teamviewer vulnerabilityTeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, whi…EPSS 3.6%9.3CVE-2010-3128Teamviewer vulnerabilityUntrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code a…EPSS 8.4%8.8CVE-2021-34859Teamviewer memory buffer overflow vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required …EPSS 8.9%8.8CVE-2020-13699Teamviewer argument injection vulnerabilityTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitr…EPSS 26%8.8CVE-2019-18251Omron cx-supervisor vulnerabilityIn Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vul…EPSS 1.7%8.1CVE-2018-14333Teamviewer information exposure vulnerabilityTeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, w…EPSS 2.6%7.8CVE-2021-34858Teamviewer out-of-bounds read vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required to exploit…EPSS 3.8%

Source: NIST National Vulnerability Database (record CVE-2019-19362), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.