TeamViewer Urges Users to Patch Five High-Severity Flaws
Summary
TeamViewer urged users of its Windows, Linux, and macOS Full Client and Host software to update to version 15.82, which fixes five high-severity vulnerabilities. The company reported no known public exploits or active exploitation.
Key points
- The vulnerabilities affect TeamViewer Full Client and Host software on Windows, Linux, and macOS.
- CVE-2026-92370 is a remote session access control bypass that could enable unauthorized actions leading to remote code execution.
- The other flaws involve path traversal, a heap-based buffer overflow, a TOCTOU race condition, and improper path validation.
- The flaws could enable code execution or privilege escalation, including to SYSTEM or root.
- TeamViewer recommends updating to version 15.82 or supported maintenance and legacy releases that address the vulnerabilities.
- TeamViewer said it knows of no public exploit code or active exploitation.
Article Details
- Vulnerability Types
- Improper access control
- Path traversal
- Heap-based buffer overflow
- Time-of-check time-of-use (TOCTOU) race condition
- Improper path validation
- Severity
- High
- Exploitation Status
- not_reported
- Exploit Availability
- none_reported
- Patch Status
- available