CVE-2025-0065

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Argument Delimiters in the TeamViewer_service.exe component of TeamViewer Clients prior version 15.62 for Windows allows an attacker with local unprivileged access on a Windows system to elevate privileges via argument injection.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-88

Affected software

Vendor	Product	Versions
TeamViewer	Remote Full Client	>= 15.0.0, < 15.62; >= 14.0.0, < 14.7.48799; >= 13.0.0, < 13.2.36226; >= 12.0.0, < 12.0.259319; >= 11.0.0, < 11.0.259318
TeamViewer	Remote Host	>= 15.0.0, < 15.62; >= 14.0.0, < 14.7.48799; >= 13.0.0, < 13.2.36226; >= 12.0.0, < 12.0.259319; >= 11.0.0, < 11.0.259318

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1001/

Timeline

Published: Jan 28, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-00668.8Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) allows an attacker to access restric CVE-2025-00676.3Due to a missing authorization check on service endpoints in the SAP NetWeaver Application Server Java, an attacker with standard user role CVE-2025-00684.3An obsolete functionality in SAP NetWeaver Application Server ABAP did not perform necessary authorization checks. Because of this, an authe CVE-2025-00697.8Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user CVE-2025-00709.9SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to obtain illegitimate access to the system by CVE-2025-00714.9SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a CVE-2025-00727.8Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-pri CVE-2025-00737.8Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-pri CVE-2025-00749.8In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead CVE-2025-00759.8In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could l CVE-2025-00763.3In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. This could lead to CVE-2025-00774.0In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This could lead to local escal