CVE-2026-92370
High
Description
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Full Client
PublishedSep 29, 2026
First seenSep 29, 2026
Weakness typeCWE-284Improper access control
How to fix
Update
- TeamViewer Full Client15.82, 15.64.8 (Legacy Windows 7 & 8), 14.7.48855 (Windows), 13.2.36230 (Windows), 14.7.48855 (Linux), 13.2.153995 (Linux), 14.7.48855 (MacOS), 13.2.153994 (MacOS) or later
- TeamViewer Host15.82, 15.64.8 (Legacy Windows 7 & 8), 14.7.48855 (Windows), 13.2.36230 (Windows), 14.7.48855 (Linux), 13.2.153995 (Linux), 14.7.48855 (MacOS), 13.2.153994 (MacOS) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TeamViewer Full Client | 15.0 ≤ v < 15.82, 15.64.0 (Legacy Windows 7 & 8) ≤ v < 15.64.8 (Legacy Windows 7 & 8), 14.7.0 (Windows) ≤ v < 14.7.48855 (Windows), 13.2.0 (Windows) ≤ v < 13.2.36230 (Windows), 14.7.0 (Linux) ≤ v < 14.7.48855 (Linux), 13.2.0 (Linux) ≤ v < 13.2.153995 (Linux), 14.7.0 (MacOS) ≤ v < 14.7.48855 (MacOS), 13.2.0 (MacOS) ≤ v < 13.2.153994 (MacOS) | 15.82, 15.64.8 (Legacy Windows 7 & 8), 14.7.48855 (Windows), 13.2.36230 (Windows), 14.7.48855 (Linux), 13.2.153995 (Linux), 14.7.48855 (MacOS), 13.2.153994 (MacOS) |
| TeamViewer Host | 15.0 ≤ v < 15.82, 15.64.0 (Legacy Windows 7 & 8) ≤ v < 15.64.8 (Legacy Windows 7 & 8), 14.7.0 (Windows) ≤ v < 14.7.48855 (Windows), 13.2.0 (Windows) ≤ v < 13.2.36230 (Windows), 14.7.0 (Linux) ≤ v < 14.7.48855 (Linux), 13.2.0 (Linux) ≤ v < 13.2.153995 (Linux), 14.7.0 (MacOS) ≤ v < 14.7.48855 (MacOS), 13.2.0 (MacOS) ≤ v < 13.2.153994 (MacOS) | 15.82, 15.64.8 (Legacy Windows 7 & 8), 14.7.48855 (Windows), 13.2.36230 (Windows), 14.7.48855 (Linux), 13.2.153995 (Linux), 14.7.48855 (MacOS), 13.2.153994 (MacOS) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.