TeamViewer clients before 15.83 let malicious hosts run code on viewers
CVE-2026-111585 is an integer overflow scored 8.8 and fixed in 15.83; TeamViewer reports no known exploitation.
68
Vulnerability1 · 1 read
CVE-2026-92374
TOCTOU privilege escalation in TeamViewer macOS helper before 15.83
- CVSS 3.1
- 7.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A time-of-check time-of-use race and improper symbolic-link handling in the privileged helper of TeamViewer Full Client and Host on macOS let a local, low-privileged user bypass installer package verification and install a malicious package. No user interaction is required. Successful exploitation escalates privileges to root. Versions prior to 15.83 are affected.
What to do: Upgrade TeamViewer Full Client and Host on macOS to 15.83 or later.
| Product | Affected | Fixed in |
|---|---|---|
| TeamViewer Full Client (macOS) | prior to 15.83 | 15.83 |
| TeamViewer Host (macOS) | prior to 15.83 | 15.83 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.
- Weakness
- CWE-367
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news
2 storiesTeamViewer flaws before 15.83 allow code execution in sessions
Three high-severity bugs score up to 8.8, and TeamViewer reported no known active exploitation.
62