CVE-2026-92372High· 8.8▾ TwilightAn out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remo…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 28.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.4%
An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.
full_client < 15.83full_client >= 14.7.0 (Linux) < 14.7.48868 (Linux)full_client >= 14.7.0 (macOS) < 14.7.48868 (macOS)full_client >= 13.2.0 (Linux) < 13.2.154008 (Linux)full_client >= 13.2.0 (macOS) < 13.2.154007 (macOS)Update to the latest available version.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111585High· 8.8Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
CVE-2026-92374High· 7.8Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS
CVE-2026-92377High· 7.8Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
CVE-2026-111583High· 7.3Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows
CVE-2026-92375High· 7.8Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
CVE-2026-92370High· 8.8An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session esta…