All vulnerabilities
CVE-2026-92372

Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

TeamViewer Full Client
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationExploitation reported1 outlet report it, first 27 Oct 2026. Not yet in the KEV catalogReports
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in15.83Also 14.7.48868 (Linux), 14.7.48868 (macOS) and 2 moreCVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 27 Oct 2026, 15:08 UTCPublishedCVE List
  2. 27 Oct 2026, 16:27 UTCFirst reported exploitedTelegram: CVE Notify
  3. NowNot on CISA's known exploited list yet

Reports 1

One outlet reports exploitation. Reports are not confirmation; each links to its source.

Description

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.

Text from CVE List

Affected versions 5

  • Full Clientaffected: all versions before 15.83CVE List
  • Full Clientaffected: 14.7.0 (Linux) before 14.7.48868 (Linux)CVE List
  • Full Clientaffected: 14.7.0 (macOS) before 14.7.48868 (macOS)CVE List
  • Full Clientaffected: 13.2.0 (Linux) before 13.2.154008 (Linux)CVE List
  • Full Clientaffected: 13.2.0 (macOS) before 13.2.154007 (macOS)CVE List

References 1