Multiple security vulnerabilities have been identified in TeamViewer Full Client, affecting remote access client components on Windows, macOS, Linux, and Android. The flaws involve memory corruption in screen processing and insecure package handling, creating a risk of remote code execution or local privilege escalation. Affected versions include the 14.7 branch, and no confirmed exploitation is known. Overall, the issues pose a high risk to endpoints and administrators using remote support sessions.
CVE-2026-92372 (CVSS 8.8 — High): An out-of-bounds write flaw in the screen-image decoder for Linux and macOS results from missing destination bounds checks during a remote-control session. An attacker can cause an out-of-bounds buffer write, potentially leading to remote code execution, including through a user opening a specially crafted session recording.[/subscribe_to_unlock_form]
Multiple security vulnerabilities have been identified in TeamViewer Full Client, affecting remote access client components on Windows, macOS, Linux, and Android. The flaws involve memory corruption in screen processing and insecure package handling, creating a risk of remote code execution or local privilege escalation. Affected versions include the 14.7 branch, and no confirmed exploitation is known. Overall, the issues pose a high risk to endpoints and administrators using remote support sessions.
CVE-2026-92372 (CVSS 8.8 — High): An out-of-bounds write flaw in the screen-image decoder for Linux and macOS results from missing destination bounds checks during a remote-control session. An attacker can cause an out-of-bounds buffer write, potentially leading to remote code execution, including through a user opening a specially crafted session recording.[emaillocker id="1283"]
CVE-2026-111585 (CVSS 8.8 — High): An integer overflow in the remote-control screen decompression component can be triggered by crafted screen data from a malicious or compromised remote host. This can cause a heap-based buffer overflow, leading to a crash or arbitrary code execution with the viewer process privileges.
CVE-2026-92374 (CVSS 7.8 — High): A time-of-check time-of-use race condition and improper symbolic link handling in the macOS privileged helper allow insecure package handling. A low-privileged local attacker can bypass installer package verification, install a malicious package, and gain root privileges.
These vulnerabilities collectively present a high risk to organizations that rely on remote access client software, especially endpoints and administrators exposed to untrusted remote sessions. The combination of remote code execution and local privilege escalation makes affected deployments most at risk. Urgent attention to the affected software is warranted.
We recommend you to update TeamViewer Full Client, Host, Portable and Android Remote Control App to version 15.83, or deploy patched legacy builds 15.64.10, 14.7.48868, 13.2.36231 (Windows), 13.2.154008 (Linux), and 13.2.154007 (macOS).
The following reports contain further technical details:
[/emaillocker]