Is CVE-2019-11769 actively exploited?

No active exploitation of CVE-2019-11769 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2019-11769 be exploited remotely?

No. CVE-2019-11769 requires local access to exploit.

What is the CVSS score of CVE-2019-11769?

CVE-2019-11769 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2019-11769

HIGH

CVE-2019-11769

CWE-522Published: September 11, 2019· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

An issue was discovered in TeamViewer 14.2.2558. Updating the product as a non-administrative user requires entering administrative credentials into the GUI. Subsequently, these credentials are processed in Teamviewer.exe, which allows any application running in the same non-administrative user context to intercept them in cleartext within process memory. By using this technique, a local attacker is able to obtain administrative credentials in order to elevate privileges. This vulnerability can be exploited by injecting code into Teamviewer.exe which intercepts calls to GetWindowTextW and logs the processed credentials.

NVD Source

Technical Analysis

CVE-2019-11769 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.