Affected Systems
TeamViewer Full Client and Host software for Windows, Linux, and macOS. Vulnerabilities resolved in version 15.82 and supported maintenance/legacy releases. Five CVEs: CVE-2026-92370 (remote access control bypass leading to RCE), CVE-2026-19743 (path traversal), CVE-2026-92368 (heap buffer overflow), CVE-2026-92369 (TOCTOU race condition), CVE-2026-92371 (improper path validation). Four local privilege escalation flaws allow escalation to NT AUTHORITY\SYSTEM or root.
Exploitation Status
No evidence of active exploitation or public exploit code. TeamViewer states it is not aware of public disclosure or exploitation in the wild as of September 30, 2026.
Business Impact
High-severity vulnerabilities in widely deployed remote access software. CVE-2026-92370 allows remote attackers to bypass access controls and execute code. Four additional flaws enable local attackers to escalate privileges to SYSTEM/root or achieve remote code execution with current user privileges. TeamViewer is frequently targeted by ransomware groups and threat actors for initial access. Organizations with TeamViewer deployed face risk of unauthorized remote access and privilege escalation if unpatched. CVSS scores not published in advisory.
Urgency
🟠Within 24 hours
Recommended Actions
- Update all TeamViewer Full Client and Host installations to version 15.82 or the corresponding patched maintenance/legacy release immediately
- Audit systems for unauthorized TeamViewer installations or usage, particularly on critical servers and endpoints
- Review TeamViewer connection logs for suspicious remote sessions or access attempts during the vulnerability window (prior to patching)
- Enforce application whitelisting or endpoint controls to prevent unauthorized remote access tool deployment
- Consider implementing network segmentation or firewall rules to restrict TeamViewer connections to approved IP ranges if business requirements allow