TeamViewer 15.83 之前版本遭發現遠端程式執行漏洞 CVE-2026-92372
CVE-2026-92372 - Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
TeamViewer 的 Linux 與 macOS 版在 15.83 之前存在一個遠端程式執行漏洞，攻擊者可透過偽造螢幕影像或誘使使用者開啟惡意 .tvs 檔案來執行任意程式。
此漏洞可導致遠端執行任意程式，需立即升級至 15.83 版並避免開啟惡意錄影；若已升級，請確認已套用安全修補；同時提醒使用者勿隨意下載未知來源的 .tvs 檔案。
An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.
Impact
Affected Products
The following products are affected by CVE-2026-92372
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | 13430f76-86eb-43b2-a71c-82c956ef31b6 |
Update TeamViewer to version 15.83 or later to fix memory corruption.
- Update TeamViewer to version 15.83 or later.
- Ensure users avoid opening malicious session recordings.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-92372 vulnerability anywhere in the article.
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.