CVE-2024-0819: Incomplete protection of personal password settings

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-27 · updated 2026-06-17
Weakness: CWE-269

Description

Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to elevate privileges by changing the personal password setting and establishing a remote connection to a logged-in admin account.

Affected products

TeamViewer Remote: before 15.51.5 — fixed in 15.51.5

How to fix

Upgrade to a fixed version: TeamViewer Remote 15.51.5. Check the vendor advisory for mitigations.

References

https://www.teamviewer.com/en/trust-center/security-bulletins/tv-2024-1001/
https://www.teamviewer.com/en/trust-center/security-bulletins/tv-2024-1001/

Get alerted when CVE-2024-0819 or the next vulnerability affects your stack