Live › vulnerability › CVE-2026-92372
Go to dashboardTeamViewer Full Client for Linux and macOS before 15.83 has an out-of-bounds write in its screen-image decoder. A remote attacker who sends crafted screen data during a session, or a user who opens a crafted .tvs session recording, can execute arbitrary code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Machines running TeamViewer Full Client for Linux or macOS before 15.83 are exposed, including those that accept remote-control sessions or open session recordings. Windows installs and machines without TeamViewer can skip it, as the description names only the Linux and macOS clients.
No product ranges from the sources yet.
teamviewer --version on Linux or check the app version under TeamViewer > About on macOS15.83 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.
This page as .md · .json · in your agent: get_signal("CVE-2026-92372")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.