← Back to CVEs
CVE-2026-23568
MEDIUM5.4
Description
An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-of-service via a special crafted packet. The leaked memory could be used to bypass ASLR and facilitate further exploitation.
CVE Details
CVSS v3.1 Score5.4
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Attack VectorADJACENT_NETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published1/29/2026
Last Modified2/11/2026
Sourcenvd
Honeypot Sightings0
Affected Products
microsoft:windowsteamviewer:digital_employee_experience
Weaknesses (CWE)
CWE-125
References
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1001/(psirt@teamviewer.com)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.