CVE-2026-92374 PUBLISHED

Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS

Assigner: TV
Reserved: 16.09.2026 Published: 27.10.2026 Updated: 27.10.2026

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor TeamViewer
Product Full Client
Versions Default: unaffected
  • affected from 0 to 15.83 (excl.)
  • affected from 14.7.0 to 14.7.48868 (excl.)
  • affected from 13.2.0 to 13.2.154007 (excl.)
Vendor TeamViewer
Product Host
Versions Default: unaffected
  • affected from 0 to 15.83 (excl.)
  • affected from 14.7.0 to 14.7.48868 (excl.)
  • affected from 13.2.0 to 13.2.154007 (excl.)

Solutions

Update to the latest available version.

Credits

  • HeaZzy (Mathys KHALFA) & skav (Antoine RIEUL) finder

References

Problem Types

  • CWE-367 Time-of-check time-of-use (TOCTOU) race condition CWE