TeamViewer flaws before 15.83 allow code execution in sessions
Original title: TeamViewer Vulnerabilities Could Let Hackers Execute Malicious Code Through Remote Desktop Sessions
Three high-severity bugs score up to 8.8, and TeamViewer reported no known active exploitation.
TeamViewer bulletin TV-2026-1011, published October 27, 2026, fixes three high-severity flaws in client components used with TeamViewer Remote, Tensor, and ONE. CVE-2026-92372 and CVE-2026-111585, both scored 8.8, involve screen-image processing that can crash a viewer or run code during a remote session or, for the first bug, a malicious .tvs recording. CVE-2026-92374, scored 7.8, lets a local macOS user escalate to root through the privileged helper. TeamViewer said it was not aware of active exploitation and urged installs of 15.83 or listed legacy builds.
- CVE-2026-92372 affects Linux and macOS Full Client before 15.83 and needs user interaction.
- CVE-2026-111585 also hits Windows, Windows Portable, and Android Remote Control before 15.83.
- Legacy fixes named are 15.64.10, 14.7.48868, and platform-specific 13.2 builds.
- The macOS root bug requires existing local access, unlike the session flaws.
Impact: Code execution in the viewer or root on macOS
| Product | Affected | Fixed in |
|---|---|---|
| TeamViewer Full Client | before 15.83; older 14.7 and 13.2 branches | 15.83; 15.64.10; 14.7.48868; 13.2 builds |
| TeamViewer Host | before 15.83 | 15.83 |
| TeamViewer Android Remote Control | before 15.83 | 15.83 |
- 1.Install TeamViewer 15.83 or the latest release from the official download page.
- 2.On legacy platforms, apply 15.64.10, 14.7.48868, or the platform-specific 13.2 build.
- 3.Check Host and older 14.7 and 13.2 components, not only the main desktop app.
- Vendors
- TeamViewer
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-111585 | Integer overflow in TeamViewer remote-control screen processing before 15.83 | 8.8 | — | ||
| CVE-2026-92372 | Out-of-bounds write in TeamViewer Linux/macOS screen decoder | 8.8 | — | ||
| CVE-2026-92374 | TOCTOU privilege escalation in TeamViewer macOS helper before 15.83 | 7.8 | — |
From the original article
2 min read at cybersecuritynews.com
TeamViewer has released security updates for three high-severity vulnerabilities that could let attackers run malicious code, crash remote desktop clients, or gain root access on macOS. The flaws affect client components used with TeamViewer Remote, TeamViewer Tensor, and TeamViewer ONE, with CVSS scores reaching 8. 8.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.