CVE Feed

    Dashboard / CVE / CVE-2025-64994

    CVE-2025-64994

    A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-SetWorkRate instruction prior V17.1. The improper handling of executable search paths could allow local attackers with write access to a PATH directory on a device to escalate privileges and execute arbitrary code as SYSTEM.

    Published:Dec 11, 2025
    Last Modified:Jan 9, 2026
    EPS:Dec 11, 2025
    EPSS Score:0.00014
    CVSS Score:6.5

    Affected Products

    Vendor
    Teamviewer
    Product
    Dex
    Vendor
    Teamviewer
    Product
    Digital Employee Experience

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-427 Uncontrolled Search Path Element

    Related CVEs

    CVE-2026-8381 (CVSS 5.4) — A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. C…
    CVE-2026-2695 (CVSS 6.3) — A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platfor…
    CVE-2026-23570 (CVSS 6.5) — A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Dist…
    CVE-2026-23569 (CVSS 6.5) — An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Ser…
    CVE-2026-23568 (CVSS 5.4) — An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Ser…
    CVE-2026-23567 (CVSS 6.5) — An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Dist…
    CVE-2026-23566 (CVSS 6.5) — A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) p…
    CVE-2026-23565 (CVSS 6.5) — A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) p…
    CVE-2026-23564 (CVSS 6.5) — A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) p…
    CVE-2026-23571 (CVSS 6.8) — A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High