CVE-2025-12687
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
TeamViewer DEX Client (formerly 1E Client) - Content Distribution Service (NomadBranch.exe) versions prior to 25.11 for Windows contains a vulnerability. It allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.
Risk Assessment
An attacker can remotely cause a crash of a critical content distribution service, potentially leading to operational disruptions and system unavailability.
Recommendation
Update TeamViewer DEX Client to version 25.11 or later, which includes a fix for this vulnerability.
Other vulnerabilities in TeamViewer DEX Client
See all- CVE-2025-46266Medium
A vulnerability in TeamViewer DEX Client (formerly 1E Client) - Content Distribution Service (NomadBranch.exe) prior to version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.
- CVE-2025-44016High
A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.
Original NVD description (English source)
A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS