What is CVE-2025-64995?

CVE-2025-64995 is a medium-severity vulnerability in Teamviewer Dex, classified under Uncontrolled Search Path Element. CVSS score: 6.5/10. Published 2025-12-11.

How severe is CVE-2025-64995?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Teamviewer Dex

CVE-2025-64995

A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local device allows attackers, with local access to the device during execution, to hijack the process and execute arbitrary code with SYSTEM privileges.

EPSS: 0.001 (3.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H.

Affected products

Teamviewer Dex — versions 0
Teamviewer Digital_employee_experience

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

psirt@teamviewer.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-64995?: CVE-2025-64995 is a medium-severity vulnerability in Teamviewer Dex, classified under Uncontrolled Search Path Element. CVSS score: 6.5/10. Published 2025-12-11.
How severe is CVE-2025-64995?: Medium severity. CVSS v3 base score is 6.5 out of 10.