CVE-2026-92372
Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.
| CWE | CWE-123 |
| Vendor | teamviewer |
| Product | full client |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for teamviewer full client
Be the first to know when new high vulnerabilities affecting teamviewer full client are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
TeamViewer / Full Client
0 < 15.83 14.7.0 (Linux) < 14.7.48868 (Linux) 14.7.0 (macOS) < 14.7.48868 (macOS) 13.2.0 (Linux) < 13.2.154008 (Linux) 13.2.0 (macOS) < 13.2.154007 (macOS)
References
Credits
HeaZzy (Mathys KHALFA) & skav (Antoine RIEUL)