TeamViewer urges users to patch severe flaws “as soon as possible”
TeamViewer urges immediate updates for five high-severity client and host flaws, including a remote code-execution bug.
72
Vulnerability3 · 1 read
CVE-2026-92368
Heap buffer overflow in TeamViewer Linux and macOS clients
- CVSS 3.1
- 7.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
TeamViewer Full Client and Host for Linux and macOS before version 15.82 have a heap-based buffer overflow (CWE-122) when processing .tvs session recording files. A size mismatch while decompressing recorded session data can cause out-of-bounds writes on the heap. An attacker who convinces a user to open a crafted recording through “Play or convert recorded session…” may run arbitrary code with that user’s privileges. The issue is local, requires user interaction, and is not described for Windows clients. It is not listed in CISA KEV, and no public proof-of-concept is known.
What to do: Update TeamViewer Full Client and Host on Linux and macOS to version 15.82 or later. Until then, do not open untrusted .tvs files with “Play or convert recorded session…”, and treat unexpected session recordings as suspicious.
| Product | Affected |
|---|---|
| TeamViewer Full Client | Linux and macOS versions prior to 15.82 |
| TeamViewer Host | Linux and macOS versions prior to 15.82 |
Estimated exposure
largeon the order of hundreds of thousands to low millions of Linux and macOS Full Client/Host installs still below 15.82 — TeamViewer is a widely deployed remote-access product with a very large overall install base, but this flaw is limited to Linux and macOS Full Client and Host builds before 15.82; Windows is not listed as affected, and no public count of…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user
- Weakness
- CWE-122
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news
3 storiesMultiple TeamViewer Vulnerabilities Enable RCE, Access Control Bypass and Privilege Escalation
TeamViewer patched five high-severity flaws enabling RCE, access-control bypass, and privilege escalation.
67
Critical TeamViewer Vulnerabilities Enable Code Execution Attacks Via Remote Session
TeamViewer patched five high-severity flaws, including an 8.8 access-control bypass that could enable code execution.
64