High severity · published Oct 27, 2026
CVE-2026-92374
Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS
New
7.8
CVSS
–
EPSS
No
On KEV
Description
A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Full Client · TeamViewer
before 15.83; 14.7.0 before 14.7.48868; 13.2.0 before 13.2.154007 · source: vendor
HO
Host · TeamViewer
before 15.83; 14.7.0 before 14.7.48868; 13.2.0 before 13.2.154007 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-92374
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-92374
www.teamviewer.com
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/
More from Full Client
8.8
CVE-2026-111585
Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
8.8
CVE-2026-92372
Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
8.8
CVE-2026-92370
Remote Session Access Control Bypass Leading to Remote Code Execution
8.8
CVE-2026-19042
Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
7.8
CVE-2026-92377
Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows