Vulnerabilities

TI-2026-62305 CVE-2026-92370 · GHSA-27v8-wq28-cjrp

Remote Session Access Control Bypass Leading to Remote Code Execution

MEDIUM 40

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings du…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00421 Published 2026-09-29 Fixed in 15.82, 15.64.8 (Legacy Windows 7 & 8) +6 CWE-284

TI-2026-62306 CVE-2026-92371 · GHSA-j8jf-5637-q9wc

Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording

LOW 32

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00114 Published 2026-09-29 Fixed in 15.82 CWE-59

TI-2026-62303 CVE-2026-92368 · GHSA-gj3p-4hcp-q7w6

Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution

LOW 35

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00153 Published 2026-09-29 Fixed in 15.82 CWE-122

TI-2026-62304 CVE-2026-92369 · GHSA-gc52-c427-xf67

Time-of-check time-of-use race condition in TeamViewer Full Client

LOW 33

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00095 Published 2026-09-29 Fixed in 15.82, 15.64.8 (Legacy Windows 7 & 8) +2 CWE-367

TI-2026-16009 CVE-2026-19743 · GHSA-xx8p-86ff-fc5j

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients