Critical TeamViewer Vulnerabilities Enable Code Execution Attacks Via Remote Session
TeamViewer patched five high-severity flaws, including an 8.8 access-control bypass that could enable code execution.
TeamViewer patched five high-severity vulnerabilities in Full Client, Host, and related components on Windows, Linux, and macOS, and urged upgrades to version 15.82. The highest-rated issue, CVE-2026-92370 (CVSS 8.8), lets authenticated remote attackers bypass configured session restrictions and could lead to code execution. Other flaws include local IPC path traversal (CVE-2026-19743, CVSS 7.8), a Windows installer TOCTOU race, a Linux link-resolution race, and a heap overflow in .tvs session playback. TeamViewer said it is not aware of public disclosure or active exploitation.
- Five high-severity TeamViewer flaws affect Full Client and Host before 15.82.
- CVE-2026-92370, CVSS 8.8, can bypass session restrictions and enable code execution.
- CVE-2026-19743 is local IPC path traversal to SYSTEM or root writes.
- Other bugs include installer TOCTOU, Linux link races, and a .tvs heap overflow.
- TeamViewer reports no public disclosure or active exploitation.
- Vendors
- TeamViewer
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-92370+2 related CVEs | Access Control Bypass in TeamViewer Full Client and Host Could Lead to RCE | 8.8 group max | — | ||
CVE-2026-92369+1 related CVE | TOCTOU privilege escalation in TeamViewer Windows installer | 7.3 group max | — |
From the original article
2 min read at cybersecuritynews.com
TeamViewer has released security updates to fix five high-severity vulnerabilities affecting its Full Client, Host, and related components across Windows, Linux, and macOS. The most serious issue could allow attackers to bypass configured remote-session permissions and potentially execute code on vulnerable systems. The company urged customers to update TeamViewer clients to version 15.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.