CVE-2025-64995

MEDIUM

Teamviewer Digital Employee Experience - Uncontrolled Search Path

Title source: rule

Description

A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local device allows attackers, with local access to the device during execution, to hijack the process and execute arbitrary code with SYSTEM privileges.

References (1)

[Vendor Advisory] https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006/

Scores

CVSS v3 6.5

EPSS 0.0003

EPSS Percentile 7.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-427

Status published

Products (1)

teamviewer/digital_employee_experience < 3.4

Published Dec 11, 2025

Tracked Since Feb 18, 2026