A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local device allows attackers, with local access to the device during execution, to hijack the process and execute arbitrary code with SYSTEM privileges.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006/ Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.7 · teamviewerNVD modified 2026-10-08 10:10
Affected (CPE criteria) 1
cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*