The highest-severity flaw, CVE-2026-92370, is a remote session access control bypass stemming from an improper access control weakness in TeamViewer Full Client and Host software for Windows, Linux, and macOS that could let remote threat actors perform unauthorized actions leading to remote code execution on targeted systems.[1]
Introduction to Malware Binary Triage (IMBT) Course
Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.
Enroll Now and Save 10%: Coupon Code MWNEWS10
Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.
Four other security issues have also been addressed, these include CVE-2026-19743 (A path traversal), CVE-2026-92368 (A heap-based buffer overflow), CVE-2026-92369 (A time-of-check time-of-use (TOCTOU) race condition), and CVE-2026-92371 (an improper path validation that will allow local attackers to gain code execution remotely with the privileges of the current user or escalate privileges to NT AUHORITY/SYSTEM or root.)[2]
CVE
CVE-2026-92370
CVE-2026-19743
CVE-2026-92368
CVE-2026-92369
CVE-2026-92371
Affected Products
Versions of TeamViewer Clients prior to 15.82
Recommended Actions
Although there is yet not found evidence that the vulnerabilities have publicly available exploit code or are being actively exploited, TeamViewer has urged customers to update to TeamViewer version 15.82, which addresses these security flaws.
References
[1] https://www.cve.org/CVERecord?id=CVE-2026-92370
[2] https://www.bleepingcomputer.com/news/security/teamviewer-urges-users-to-patch-severe-flaws-as-soon-as-possible/
The post Multiple High-Severity Vulnerabilities in TeamViewer appeared first on Truesec.
Article Link: Multiple High-Severity Vulnerabilities in TeamViewer - Truesec