CVE-2026-92370
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Remote Session Access Control Bypass Leading to Remote Code Execution
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Full Client
- Vendor
- TeamViewer
- Product
- Full Client
- Platforms
- Windows
- Linux
- MacOS
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 15.0 | affected | custom | 15.82 | Unavailable | None listed |
| 15.64.0 (Legacy Windows 7 & 8) | affected | custom | 15.64.8 (Legacy Windows 7 & 8) | Unavailable | None listed |
| 14.7.0 (Windows) | affected | custom | 14.7.48855 (Windows) | Unavailable | None listed |
| 13.2.0 (Windows) | affected | custom | 13.2.36230 (Windows) | Unavailable | None listed |
| 14.7.0 (Linux) | affected | custom | 14.7.48855 (Linux) | Unavailable | None listed |
| 13.2.0 (Linux) | affected | custom | 13.2.153995 (Linux) | Unavailable | None listed |
| 14.7.0 (MacOS) | affected | custom | 14.7.48855 (MacOS) | Unavailable | None listed |
| 13.2.0 (MacOS) | affected | custom | 13.2.153994 (MacOS) | Unavailable | None listed |
Host
- Vendor
- TeamViewer
- Product
- Host
- Platforms
- Windows
- Linux
- MacOS
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 15.0 | affected | custom | 15.82 | Unavailable | None listed |
| 15.64.0 (Legacy Windows 7 & 8) | affected | custom | 15.64.8 (Legacy Windows 7 & 8) | Unavailable | None listed |
| 14.7.0 (Windows) | affected | custom | 14.7.48855 (Windows) | Unavailable | None listed |
| 13.2.0 (Windows) | affected | custom | 13.2.36230 (Windows) | Unavailable | None listed |
| 14.7.0 (Linux) | affected | custom | 14.7.48855 (Linux) | Unavailable | None listed |
| 13.2.0 (Linux) | affected | custom | 13.2.153995 (Linux) | Unavailable | None listed |
| 14.7.0 (MacOS) | affected | custom | 14.7.48855 (MacOS) | Unavailable | None listed |
| 13.2.0 (MacOS) | affected | custom | 13.2.153994 (MacOS) | Unavailable | None listed |