CVE-2026-92372 Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-92372?
CVE-2026-92372 is a high-severity vulnerability in TeamViewer Full Client, published on 27 Oct 2026.
Official description
An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.
Weakness: CWE-123
Which versions are affected by CVE-2026-92372?
How do I fix CVE-2026-92372?
No fix has been published for CVE-2026-92372 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-92372 being exploited?
There is no known exploitation of CVE-2026-92372 in the wild and no public exploit code.
Sources
Also known as GHSA-2p63-5vwr-rhf8.