{"id":"CVE-2026-92376","title":"Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows","summary":"Improper authentication in the\ninter-process communication (IPC) mechanism of TeamViewer Remote Management\nMonitoring for Windows prior to version 26.10.1 allows a local authenticated\nattacker with low privileges to impersonate the IPC b…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-287"],"vendor":"TeamViewer","product":"Remote Management - Monitoring","affected":["remote_management_-_monitoring < 26.10.1"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T15:11:08.772Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92376","references":[{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/"}],"tags":["cve.org"],"ingestedAt":"2026-10-27T16:11:59.464Z","slug":"CVE-2026-92376","body":"## Overview\n\nImproper authentication in the\ninter-process communication (IPC) mechanism of TeamViewer Remote Management\nMonitoring for Windows prior to version 26.10.1 allows a local authenticated\nattacker with low privileges to impersonate the IPC broker and cause the\nMonitoring service to execute arbitrary code with NT AUTHORITY\\SYSTEM\nprivileges, resulting in local privilege escalation.\n\n## Affected\n\n- `remote_management_-_monitoring < 26.10.1`\n\n## Remediation\n\nUpdate to the latest available version.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}