Skip to content
OpenAdvisories
High WID-SEC-2026-3670 5 CVEs

TeamViewer: Mehrere Schwachstellen

Published Sep 29, 2026 · Updated Sep 29, 2026 · de-DE

Vendor: TeamViewer Product: TeamViewer Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in TeamViewer ausnutzen, um seine Privilegien zu erhöhen, um Daten zu manipulieren oder offenzulegen, sowie um einen Denial of Service herbeizuführen.

Product

TeamViewer ist eine Fernzugriffs- und Fernsteuerungssoftware, die die Wartung von Computern und anderen Geräten ermöglicht.

Vulnerabilities 5

  • High 8.8
    CVE-2026-92370

    Remote Session Access Control Bypass Leading to Remote Code Execution

    An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifyin…

    TeamViewer Full Client Host
  • High 7.8
    CVE-2026-19743

    Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients

    Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHOR…

    TeamViewer Full Client Host
  • High 7.8
    CVE-2026-92368

    Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution

    TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bo…

    TeamViewer Full Client Host
  • High 7.3
    CVE-2026-92369

    Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation

    TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they …

    TeamViewer Full Client Host
  • High 7.0
    CVE-2026-92371

    Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording

    TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local auth…

    TeamViewer Full Client Host

Revision history

  1. #1

    Initiale Fassung

References