CVE-2021-35005

This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TeamViewer service. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated array. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-13818.

• CWE-129
• CWE-125

• https://community.teamviewer.com/English/discussion/117794/august-updates-security-patchesVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-082/Third Party Advisory, VDB Entry
• https://community.teamviewer.com/English/discussion/117794/august-updates-security-patchesVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-082/Third Party Advisory, VDB Entry

Published

Jan 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3500A flaw was found in djvulibre-3.5.28 and earlier. A Stack ov…7.8
• CVE-2021-35000OpenBSD Kernel Multicast Routing Uninitialized Memory Inform…3.3
• CVE-2021-35001BMC Track-It! GetData Missing Authorization Information Disc…6.5
• CVE-2021-35002BMC Track-It! Unrestricted File Upload Remote Code Execution…8.8
• CVE-2021-35003This vulnerability allows remote attackers to execute arbitr…9.8
• CVE-2021-35004This vulnerability allows remote attackers to execute arbitr…9.8
• CVE-2021-3501A flaw was found in the Linux kernel in versions before 5.12…7.1
• CVE-2021-3502A flaw was found in avahi 0.8-5. A reachable assertion is pr…5.5
• CVE-2021-35027A directory traversal vulnerability in the web server of the…7.5
• CVE-2021-35028A command injection vulnerability in the CGI program of the …7.8
• CVE-2021-35029An authentication bypasss vulnerability in the web-based man…9.8
• CVE-2021-3503A flaw was found in Wildfly where insufficient RBAC restrict…4.3