{"id":"CVE-2026-92374","title":"Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS","summary":"A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-367"],"vendor":"TeamViewer","product":"Full Client","affected":["full_client < 15.83","full_client >= 14.7.0 < 14.7.48868","full_client >= 13.2.0 < 13.2.154007","Host < 15.83","Host >= 14.7.0 < 14.7.48868","Host >= 13.2.0 < 13.2.154007"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T15:09:25.189Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-92374","references":[{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/"}],"tags":["cve.org"],"ingestedAt":"2026-10-27T16:11:59.463Z","slug":"CVE-2026-92374","body":"## Overview\n\nA time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.\n\n## Affected\n\n- `full_client < 15.83`\n- `full_client >= 14.7.0 < 14.7.48868`\n- `full_client >= 13.2.0 < 13.2.154007`\n- `Host < 15.83`\n- `Host >= 14.7.0 < 14.7.48868`\n- `Host >= 13.2.0 < 13.2.154007`\n\n## Remediation\n\nUpdate to the latest available version.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}