CVE-2025-44016
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.
Risk Assessment
An attacker could execute arbitrary code in the service context, potentially leading to system compromise or privilege escalation.
Recommendation
Update TeamViewer DEX Client to version 25.11 or later. Restrict access to the Content Distribution Service to trusted sources only.
Other vulnerabilities in TeamViewer DEX Client
See all- CVE-2025-46266Medium
A vulnerability in TeamViewer DEX Client (formerly 1E Client) - Content Distribution Service (NomadBranch.exe) prior to version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information.
- CVE-2025-12687Medium
TeamViewer DEX Client (formerly 1E Client) - Content Distribution Service (NomadBranch.exe) versions prior to 25.11 for Windows contains a vulnerability. It allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.
Original NVD description (English source)
A vulnerability in TeamViewer DEX Client (former 1E client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to bypass file integrity validation via a crafted request. By providing a valid hash for a malicious file, an attacker can cause the service to incorrectly validate and process the file as trusted, enabling arbitrary code execution under the Nomad Branch service context.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS