Reported by 2 outlets
Multiple High-Severity Vulnerabilities in TeamViewer
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.07 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
TeamViewer patched five vulnerabilities in version 15.82, including the critical remote access control bypass CVE-2026-92370 that could allow remote code execution on Windows, Linux, and macOS clients. Four additional issues were fixed: path traversal (CVE-2026-19743), heap-based buffer overflow (CVE-2026-92368), TOCTOU race condition (CVE-2026-92369), and improper path validation allowing privilege escalation (CVE-2026-92371). The company states no evidence of active exploitation or public exploit code exists, but urges immediate updates. The highest severity flaw affects TeamViewer Full Client and Host software and permits unauthorized remote actions leading to code execution.
Timeline
-
original reporting
Multiple High-Severity Vulnerabilities in TeamViewer
malware.news · 11d ago · October 2nd, 2026
The highest-severity flaw, CVE-2026-92370 , is a remote session access control bypass stemming from an improper access control weakness in TeamViewer Full Client and Host software for Windows, Linux, and macOS that could let remote threat actors perform unauthorized actions leading to remote code execution on targeted systems.[1] Four other security issues have also been addressed, these include CVE-2026-19743 (A path traversal), CVE-2026-92368 (A heap-based buffer overflow), CVE-2026-92369 (A time-of-check time-of-use (TOCTOU) race condition), and CVE-2026-92371 (an improper path validation that will allow local attackers to gain code execution remotely with the privileges of the current user or escalate privileges to NT AUHORITY/SYSTEM or root.)[2] CVE CVE-2026-92370 CVE-2026-19743 CVE-2026-92368 CVE-2026-92369 CVE-2026-92371 Affected Products Versions of TeamViewer Clients prior to 15.82 Recommended Actions Although there is yet not found evidence that the vulnerabilities have publicly available exploit code or are being actively exploited, TeamViewer has urged customers to update to TeamViewer version 15.82, which addresses these security flaws. References [1] https://www.cve.org/CVERecord?id=CVE-2
-
update from www.it-connect.fr
[VULN] TeamViewer fixed 5 security flaws, including one remotely exploitable - CVE-2026-92370
www.it-connect.fr · 9d ago · October 4th, 2026
[VULN] TeamViewer fixed 5 security flaws, including one remotely exploitable - CVE-2026-92370. Review the update at it-connect.fr. via Mastodon https://www.it-connect.fr/teamviewer-5-failles-securite-version-15-82/