TeamViewer Urges Update Due to Critical Security Flaws

TeamViewer has issued important security updates to address multiple severe vulnerabilities impacting its Full Client, Host, and associated components across Windows, Linux, and macOS platforms. These vulnerabilities, if left unpatched, could allow attackers to circumvent remote session permissions and execute arbitrary code on compromised systems.

Critical Vulnerabilities Highlighted

The most pressing of these issues, identified as CVE-2026-19743, affects TeamViewer Full Client and Host installations on all major operating systems prior to version 15.82. This vulnerability permits unauthorized privilege escalation, allowing low-privileged users to manipulate file paths and write files with elevated SYSTEM or root privileges. With a CVSS score of 7.8, this flaw represents a significant security risk.

Additionally, TeamViewer has addressed several other vulnerabilities, including CVE-2026-92369, a time-of-check time-of-use race condition in the Windows installer rollback mechanism. Exploiting this flaw could enable local attackers to gain SYSTEM-level privileges by replacing backup files during installation processes.

Risks and Impact

Among the addressed vulnerabilities is CVE-2026-92371, which affects the Cloud Session Recording function on Linux. This flaw, caused by improper link resolution during file access, could allow a local attacker to redirect privileged operations, leading to unauthorized access.

Another critical issue, CVE-2026-92368, involves a heap-based buffer overflow in Linux and macOS versions of TeamViewer. This vulnerability arises from a size mismatch during the decompression of session data, potentially allowing attackers to execute arbitrary code if a victim opens a malicious session recording file.

Recommended Actions for Users

TeamViewer strongly recommends that users upgrade to version 15.82 or the latest available version to mitigate these risks. Organizations should identify systems running affected versions and ensure they are updated promptly. Furthermore, security teams are advised to review and adjust access-control settings, limit remote-access privileges, and monitor for unusual activity.

In addition to addressing these vulnerabilities, organizations should remain vigilant for abnormal installer activities, suspicious session-recording files, and unexpected changes to critical system files.

By taking these proactive steps, users can significantly reduce the risk of exploitation and ensure their systems remain secure against potential threats.