Teamspeak

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-50931 1Teamspeak 1Teamspeak Jun 17, 2026 Jan 13, 2026 8.5 HIGH· v4 7.8 HIGH· v3 N/A· v2 TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3client_win32.exe with...Show more TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3client_win32.exe with custom files to potentially gain SYSTEM or Administrator-level access.Show less
CVE-2019-15502 1Teamspeak 1Teamspeak Jun 17, 2026 Aug 29, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte sequence, aka Unicode characters U+2068 (FIRST STRONG ISOLATE) and U+2067 (RIGHT-TO-LEFT ISOLATE).
CVE-2019-11351 1Teamspeak 1Teamspeak Jun 17, 2026 Apr 19, 2019 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework.
CVE-2014-7222 1Teamspeak 1Teamspeak3 Nov 21, 2024 Jan 8, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by connecting to a channel with a different client instance, and placing crafted d...Show more Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \\ (backslash) characters, a digit, a \ (backslash) character, and "z" in a series of nested img BBCODE tags.Show less
CVE-2014-7221 1Teamspeak 1Teamspeak3 Nov 21, 2024 Jan 8, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) by connecting to a channel with a different client instance, and placing crafted...Show more TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing [img]//http:// substrings.Show less
CVE-2017-8290 1Teamspeak 2Teamspeak Client Teamspeak Server May 13, 2026 Jul 6, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server version 3.0.13.6 (08/11/2016 09:48:33), it enables the users to Crash any WINDOWS Client that clicked into...Show more A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server version 3.0.13.6 (08/11/2016 09:48:33), it enables the users to Crash any WINDOWS Client that clicked into a Vulnerable Channel of a TeamSpeak Server.Show less
CVE-2017-9982 1Teamspeak 1Teamspeak Client May 13, 2026 Jun 27, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service (application crash) via the ᗪ Unicode character followed by the ༿ Unicode character.
CVE-2010-3383 1Teamspeak 1Teamspeak Apr 29, 2026 Oct 20, 2010 N/A· v4 N/A· v3 6.9 MEDIUM· v2 The (1) teamspeak and (2) teamspeak-server scripts in TeamSpeak 2.0.32 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the curre...Show more The (1) teamspeak and (2) teamspeak-server scripts in TeamSpeak 2.0.32 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.Show less
CVE-2007-4530 1Teamspeak 1Web Server Apr 23, 2026 Aug 25, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote attackers to inject arbitrary web script or HTML via (1) the error_text parameter to error_box.html or (2) the ok_title parame...Show more Multiple cross-site scripting (XSS) vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote attackers to inject arbitrary web script or HTML via (1) the error_text parameter to error_box.html or (2) the ok_title parameter to ok_box.html.Show less
CVE-2007-4529 1Teamspeak 1Web Server Apr 23, 2026 Aug 25, 2007 N/A· v4 N/A· v3 8.5 HIGH· v2 The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerA...Show more The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the (1) AdminAddServer, (2) AdminDeleteServer, (3) AdminStartServer, and (4) AdminStopServer privileges; and administration of arbitrary virtual servers via a request to a .tscmd URI with a modified serverid parameter, as demonstrated by (a) add_server.tscmd, (b) ask_delete_server.tscmd, (c) start_server.tscmd, and (d) stop_server.tscmd.Show less
CVE-2007-3956 1Teamspeak 1Web Server Apr 23, 2026 Jul 24, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username an...Show more TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username and password parameters in a request to login.tscmd on TCP port 14534.Show less