TeamViewer Patches High-Severity Flaws Enabling Remote Code Execution and Privilege Escalation

TeamViewer is urging customers to immediately update its remote access software after addressing five (5) high-severity vulnerabilities affecting TeamViewer Full Client and Host across Windows, Linux, and macOS. The most serious flaw, tracked as CVE-2026-92370, is an improper access control vulnerability that could allow a remote attacker to bypass session restrictions and perform unauthorized actions potentially leading to remote code execution (RCE). Four (4) additional vulnerabilities (CVE-2026-19743, CVE-2026-92368, CVE-2026-92369, and CVE-2026-92371) involve path traversal, a heap-based buffer overflow, a TOCTOU race condition, and improper path validation, potentially enabling code execution or privilege escalation to SYSTEM or root. TeamViewer has fixed the vulnerabilities in version 15.82, as well as supported maintenance and legacy releases, and strongly recommends users update as soon as possible. The company says it has found no evidence of public exploit code or active exploitation, though TeamViewer remains an attractive target because its legitimate remote-access capabilities have historically been abused by cybercriminals and ransomware operators. CTIX analysts recommend any TeamViewer users ensure they are running the most up to date version of the tool.