CVE-2026-92372

CVE Enrichment

CVSS: 8.8 HIGH
EPSS: 0.43%
EPSS Percentile: 36.80%
CISA KEV: Not listed

Description

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 27-Oct-2026 23:17
Last Modified: 28-Oct-2026 21:45
EPSS Date: 2026-10-29
CWE: CWE-123

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:R /
                            S:U /
                            C:H /
                            I:H /
                            A:H

References

[email protected]

Last enrichment sync: 30-Oct-2026 20:28
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

The macOS and Linux updates also resolve CVE-2026-92372, an out-of-bounds write with similar consequences: an attacker could supply crafted screen-image data or convince a user to open a specially crafted TeamViewer TeamViewer Fixes Flaw That Could Enable Code Execution on Support Technicians’ Systems

CVE (2)

MITRE ATT&CK (3)

Vendors (1)

Products (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.