CVE-2022-23242: TeamViewer

Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days.

TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection password.

Affected products

• TeamViewer TeamViewer: before 15.28 (fixed in 15.28)

Published 2022-03-23. Last modified 2026-06-17.