TeamViewer this week introduced patches for a high-severity elevation of privilege vulnerability in its distant entry options for Home windows.
Tracked as CVE-2025-0065 (CVSS rating of seven.8), the bug is described as an improper neutralization of argument delimiters within the ‘TeamViewer_service.exe’ element of the software program.
Profitable exploitation of the security defect, TeamViewer warns, may enable an unprivileged attacker with native entry to a Home windows system to carry out argument injection and elevate their privileges.
“To take advantage of this vulnerability, an attacker wants native entry to the Home windows system,” TeamViewer underlines in its advisory.
The bug impacts TeamViewer Full Consumer and TeamViewer Host variations 11.x, 12.x, 13.x, 14.x, and 15.x, and was addressed with the discharge of variations 15.62, 14.7.48799, 13.2.36226, 12.0.259319, and 11.0.259318 of the software program.
TeamViewer additionally notes that it has no indication that the flaw has been exploited within the wild, however recommends that every one customers replace their TeamViewer Purchasers for Home windows.
Based on the corporate, the vulnerability was reported by an nameless researcher through Development Micro’s Zero Day Initiative (ZDI).
Though TeamViewer says it has not seen proof of in-the-wild exploitation of this bug, customers are suggested to replace their TeamViewer functions as quickly as potential, as it isn’t unusual for menace actors to use the corporate’s software program in assaults.
Beforehand, attackers have been noticed deploying TeamViewer functions both to attach remotely to compromised gadgets, or to abuse them for loading malicious libraries and deploying backdoors and different malware. In some circumstances, menace actors focused victims with malicious variations of TeamViewer.
In September 2024, Claroty warned that using distant entry instruments resembling TeamViewer and AnyDesk in operational expertise (OT) environments can improve the assault floor and expose organizations to further dangers.
