Log in Start free

Vulnerability · Published Oct 27, 2026 · Assigned by TV

CVE-2026-92372Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

High 8.8

In plain English

A high-severity security flaw in Full Client from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 63.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.

Affected products (as reported)

VendorProductVersions
TeamViewer Full Client 0 – before 15.8314.7.0 (Linux) – before 14.7.48868 (Linux)14.7.0 (macOS) – before 14.7.48868 (macOS)13.2.0 (Linux) – before 13.2.154008 (Linux)13.2.0 (macOS) – before 13.2.154007 (macOS)

Weakness: CWE-123 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References