CVE-2026-92368

EUVD-2026-89021

29.09.2026, 16:17

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.8 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 4.51%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).

Vendor	Product	Version	Source
teamviewer	full_client	15.70 ≤ 𝑥 < 15.82	ENGINSIGHT
teamviewer	full_client	15.70 ≤ 𝑥 < 15.82	ENGINSIGHT
teamviewer	host	15.70 ≤ 𝑥 < 15.82	ENGINSIGHT
teamviewer	host	15.70 ≤ 𝑥 < 15.82	ENGINSIGHT
teamviewer	remote	15.70 ≤ 𝑥 < 15.82	ENGINSIGHT
teamviewer	remote	15.70 ≤ 𝑥 < 15.82	ENGINSIGHT

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1010/