7.5
CVE-2026-23569
- EPSS 0.34%
- Veröffentlicht 29.01.2026 08:49:32
- Zuletzt bearbeitet 11.02.2026 20:10:07
- Quelle psirt@teamviewer.com
- CVE-Watchlists
- Unerledigt
LoginOut-of-bounds read vulnerability in Content Distribution Service
An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used to bypass ASLR remotely and facilitate exploitation of other vulnerabilities on the affected system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Teamviewer ≫ Digital Employee Experience Version < 26.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.258 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| psirt@teamviewer.com | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/