CVE-2019-11769

An issue was discovered in TeamViewer 14.2.2558. Updating the product as a non-administrative user requires entering administrative credentials into the GUI. Subsequently, these credentials are processed in Teamviewer.exe, which allows any application running in the same non-administrative user context to intercept them in cleartext within process memory. By using this technique, a local attacker is able to obtain administrative credentials in order to elevate privileges. This vulnerability can be exploited by injecting code into Teamviewer.exe which intercepts calls to GetWindowTextW and logs the processed credentials.

• CWE-522

• https://blog.to.com/advisory-teamviewer-cve-2019-11769-2/Third Party Advisory
• https://community.teamviewer.com/t5/Knowledge-Base/tkb-p/Knowledgebase?type=label&labels=SecurityProduct
• https://blog.to.com/advisory-teamviewer-cve-2019-11769-2/Third Party Advisory
• https://community.teamviewer.com/t5/Knowledge-Base/tkb-p/Knowledgebase?type=label&labels=SecurityProduct

Published

Sep 11, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11763Failure to correctly handle null bytes when processing HTML …6.1
• CVE-2019-11764Mozilla developers and community members reported memory saf…8.8
• CVE-2019-11765A compromised content process could send a message to the pa…6.5
• CVE-2019-11766dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a b…9.8
• CVE-2019-11767Server side request forgery (SSRF) in phpBB before 3.2.6 all…
• CVE-2019-11768An issue was discovered in phpMyAdmin before 4.9.0.1. A vuln…
• CVE-2019-1177An elevation of privilege vulnerability exists in the way th…7
• CVE-2019-11770In Eclipse Buildship versions prior to 3.1.1, the build file…8.1
• CVE-2019-11771AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RP…7.8
• CVE-2019-11772In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, in…
• CVE-2019-11773Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATH…7.8
• CVE-2019-11774Prior to 0.1, all builds of Eclipse OMR contain a bug where …7.4