TeamViewer has patched three high-severity vulnerabilities in its remote-access clients, including two flaws that could allow remote code execution under specific conditions. The company disclosed the issues in security bulletin TV-2026-1011, published on October 27 and updated the following day, and recommends that users install the latest available versions. The advisory says TeamViewer was not aware of active exploitation when it was published. The update follows the company’s earlier warning about five other high-severity vulnerabilities in September.
One of the issues, tracked as CVE-2026-111585, is an integer overflow in the remote-control screen-processing component of TeamViewer clients. Rated 8.8 on the CVSS scale, it may allow a malicious remote host to crash the viewer or, depending on the platform, potentially execute code with the viewer process’s privileges. Exploitation requires a user to establish a remote-control session with a host controlled by an attacker or already compromised, so the flaw is not a drive-by attack against users who are not connecting to a remote machine.
Another high-severity flaw, CVE-2026-92372, is an out-of-bounds write in the screen-image decoder of TeamViewer Full Client for Linux and macOS. TeamViewer says crafted screen-image data sent during a remote-control session could trigger arbitrary code execution. The company also warns that an attacker could exploit the issue by persuading a user to open a specially crafted TeamViewer session-recording file with the .tvs extension. This vulnerability also carries a CVSS score of 8.8 and requires user interaction.
The third issue, CVE-2026-92374, affects the privileged helper used by TeamViewer Full Client and Host on macOS. A local attacker with low privileges could exploit a time-of-check to time-of-use race condition and improper symbolic-link handling to bypass installer package verification and install a malicious package, potentially gaining root access. TeamViewer rates this flaw 7.8 on the CVSS scale.
The bulletin lists different affected components for each issue. CVE-2026-92374 affects Full Client and Host on macOS, while CVE-2026-92372 affects Full Client and Host on Linux and macOS. CVE-2026-111585 affects Full Client and Portable on Windows, Linux and macOS, as well as the Android Remote Control app. TeamViewer has fixed the flaws in version 15.83 and published separate maintenance releases for older branches, including 15.64.10, 14.7.48868 and platform-specific 13.2 builds. Administrators should check the bulletin for the correct version for each operating system and deployment.
TeamViewer says the vulnerabilities have been resolved in the latest available versions and recommends updating as soon as possible. Its advisory does not report confirmed exploitation in the wild. The bulletin covers TeamViewer Remote, TeamViewer Tensor and TeamViewer ONE products.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
