Skip to content
OpenAdvisories
High · 7.8 CVE-2026-92374 EUVD-2026-111074GHSA-mx87-284w-9374

Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by TV

Description

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.

Affected products

VendorProductAffectedFixed
TeamViewer Full Client < 15.83, 14.7.0 – < 14.7.48868, 13.2.0 – < 13.2.154007 15.83
TeamViewer Host < 15.83, 14.7.0 – < 14.7.48868, 13.2.0 – < 13.2.154007 15.83

Advisories 1

References