← Vulnerability feed

Vulnerability record · CVE-2021-34803 · published 16 June 2021

CVE-2021-34803: Teamviewer uncontrolled search path element vulnerability

Teamviewer · Teamviewer

TeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations.

7.8 CVSS 3.1 High EPSS 0.47% · top 61.9% CWE-427 · Uncontrolled search path element
7.8CVSS 3.1 base score, v2 4.4
0.47%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
17 Jun 2026Last modified by NVD

Description

TeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://community.teamviewer.com/English/discussion/111147/windows-v9-0-259145 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111149/windows-v10-0-259144 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111150/windows-v11-0-259143 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111151/windows-v12-0-259142 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111152/windows-v13-2-36222 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111153/windows-v14-2-56678 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111154/windows-v14-7-48644 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111147/windows-v9-0-259145 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111149/windows-v10-0-259144 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111150/windows-v11-0-259143 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111151/windows-v12-0-259142 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111152/windows-v13-2-36222 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111153/windows-v14-2-56678 Release NotesVendor Advisory
https://community.teamviewer.com/English/discussion/111154/windows-v14-7-48644 Release NotesVendor Advisory

Track CVE-2021-34803 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2019-18988TeamViewer Desktop shared AES key bypasses remote-login access controlTeamViewer Desktop through 14.7.1965 uses the same AES key across all customer installations, including for OptionsPasswordAES. Anyone who knows that…KEVEPSS 4.7%analysed9.8CVE-2018-16550Teamviewer vulnerabilityTeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, whi…EPSS 3.6%9.3CVE-2010-3128Teamviewer vulnerabilityUntrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code a…EPSS 8.4%8.8CVE-2021-34859Teamviewer memory buffer overflow vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required …EPSS 8.9%8.8CVE-2020-13699Teamviewer argument injection vulnerabilityTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitr…EPSS 26%8.8CVE-2019-18251Omron cx-supervisor vulnerabilityIn Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vul…EPSS 1.7%8.1CVE-2018-14333Teamviewer information exposure vulnerabilityTeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, w…EPSS 2.6%7.8CVE-2021-34858Teamviewer out-of-bounds read vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required to exploit…EPSS 3.8%

Source: NIST National Vulnerability Database (record CVE-2021-34803), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.