CVE-2024-0819 is a high severity (CVSS 7.3) privilege escalation in TeamViewer Remote Client before version 15.51.5 on Windows, Linux and macOS, caused by improper initialization of default settings. Update to 15.51.5 or later and review personal password settings on shared machines.
What's affected
TeamViewer Remote Client before 15.51.5 for Windows, Linux and macOS. The record says improper initialization of default settings lets a low privileged user elevate privileges by changing the personal password setting and then connecting remotely to a logged in admin account.
The vendor reference is TeamViewer security bulletin TV-2024-1001.
The record classifies the weakness as CWE-269 (improper privilege management). NVD scores it 7.3 (High) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
How to check if you're exposed
Find the installed product version through the product's own About dialog or the installed programs list on the machine. Then compare it with the fixed version named above.
The weakness here sits in the installer, so also check where old installer packages are stored, such as shared drives, build servers and software distribution points. An outdated installer on a share can be reused long after the product itself is updated.
What to do now
- Update TeamViewer Remote Client to 15.51.5 or later on every machine.
- Read bulletin TV-2024-1001 for any extra steps.
- Disable the personal password option where policy allows, and use managed access control instead.
- On shared computers, review who has local logon and which accounts are logged in as administrators.
Why it matters
Improper privilege management (CWE-269) means a lower privileged account can reach rights it should not hold. Here a default left in the wrong state allows a standard user to set up remote access to an admin session on the same machine.
Remote access software deserves faster patching than most, because it is built to be reachable and a compromise gives interactive control.
Two habits help with issues of this kind. First, keep a current inventory that records which machines run the product and which version, so a new advisory becomes a quick query instead of a hunt. Second, write down the owner of each system. Many fixes slip because nobody was sure who could approve the downtime. The free in-browser dependency scan at the scan page covers the application dependencies in your repositories, and the Gold directory lists known vulnerabilities by CVE, so you can see related entries for the same product.
The record does not mark this CVE as being in the CISA Known Exploited Vulnerabilities catalog, and nothing in the record says it is exploited in the wild. That can change, so keep it on your watch list.
Quick check
Which TeamViewer versions are safe?
Per the record, 15.51.5 and later. Confirm in the vendor bulletin.
Sources
The links below are the references listed in the CVE record. The record and its description were the basis for this post, and the vendor advisory remains the authority for fixed versions.
Last reviewed: 19 October 2026.
