All vulnerabilities
CVE-2026-92370

Full Client: Remote Session Access Control Bypass Leading to Remote Code Execution

TeamViewer Full Client
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.38%Chance of exploitation activity in the next 30 days, higher than 30% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in15.82Also 15.64.8 (Legacy Windows 7 & 8), 14.7.48855 (Windows) and 5 moreCVE List
Published29 Sep 2026Updated 30 Sep 2026CVE List

What fixes it

Show all 16 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.

Text from CVE List

Affected versions 16

  • Full Clientaffected: 15.0 before 15.82CVE List
  • Full Clientaffected: 15.64.0 (Legacy Windows 7 & 8) before 15.64.8 (Legacy Windows 7 & 8)CVE List
  • Full Clientaffected: 14.7.0 (Windows) before 14.7.48855 (Windows)CVE List
  • Full Clientaffected: 13.2.0 (Windows) before 13.2.36230 (Windows)CVE List
  • Full Clientaffected: 14.7.0 (Linux) before 14.7.48855 (Linux)CVE List
  • Full Clientaffected: 13.2.0 (Linux) before 13.2.153995 (Linux)CVE List
  • Full Clientaffected: 14.7.0 (MacOS) before 14.7.48855 (MacOS)CVE List
  • Full Clientaffected: 13.2.0 (MacOS) before 13.2.153994 (MacOS)CVE List
  • Hostaffected: 15.0 before 15.82CVE List
  • Hostaffected: 15.64.0 (Legacy Windows 7 & 8) before 15.64.8 (Legacy Windows 7 & 8)CVE List
  • Hostaffected: 14.7.0 (Windows) before 14.7.48855 (Windows)CVE List
  • Hostaffected: 13.2.0 (Windows) before 13.2.36230 (Windows)CVE List
  • Hostaffected: 14.7.0 (Linux) before 14.7.48855 (Linux)CVE List
  • Hostaffected: 13.2.0 (Linux) before 13.2.153995 (Linux)CVE List
  • Hostaffected: 14.7.0 (MacOS) before 14.7.48855 (MacOS)CVE List
  • Hostaffected: 13.2.0 (MacOS) before 13.2.153994 (MacOS)CVE List

References 1