CVE Feed

    Dashboard / CVE / CVE-2026-92368

    CVE-2026-92368

    TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user

    Published:Sep 29, 2026
    Last Modified:Sep 30, 2026
    EPS:Sep 29, 2026
    EPSS Score:0.00141
    CVSS Score:7.8

    Affected Products

    Vendor
    Teamviewer
    Product
    Full Client
    Vendor
    Teamviewer
    Product
    Host

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-122 Heap-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-111585 (CVSS 8.8) — An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Port…
    CVE-2026-111583 (CVSS 7.3) — Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to ve…
    CVE-2026-92377 (CVSS 7.8) — Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Window…
    CVE-2026-92375 (CVSS 7.8) — An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior…
    CVE-2026-92374 (CVSS 7.8) — A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privi…
    CVE-2026-92372 (CVSS 8.8) — An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS…
    CVE-2026-92370 (CVSS 8.8) — An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Wind…
    CVE-2026-92371 (CVSS 7) — TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerabili…
    CVE-2026-92369 (CVSS 7.3) — TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the insta…
    CVE-2026-19743 (CVSS 7.8) — Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and ma…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High