TeamViewer 15.83 fixes nine flaws in its clients and management add-ons

TeamViewer 15.83 fixes nine flaws in its clients and management add-ons

27 October 2026: TeamViewer has fixed nine vulnerabilities in two bulletins, TV-2026-1011 for its remote-control clients and TV-2026-1012 for its Remote Management add-ons, rated up to CVSS 8.8. Version 15.83 of the Full Client and Host closes the client flaws, and Monitoring 26.10.1 closes most of the add-on ones. TeamViewer says it is not aware of any exploitation in the wild.

Both bulletins carry an issue date of 27 October and a priority of "Important". Italy's national cybersecurity agency, ACN, listed the same nine CVEs as high severity the next day.

The two flaws that reach a viewer over the network

The highest-rated pair sits on the side of the person doing the remote control, which reverses the usual worry about who connects to whom.

• CVE-2026-92372 (CVSS 8.8): an out-of-bounds write in the screen-image decoder of the Full Client for Linux and macOS. A remote attacker who supplies crafted screen data during a session can run code, and so can a crafted session recording (.tvs) that a user is persuaded to open.
• CVE-2026-111585 (CVSS 8.8): an integer overflow in screen decompression in the Full Client, the Portable version and the Android Remote Control app, on Windows, Linux and macOS. A malicious or compromised host can crash the viewer or, depending on platform, run code with the viewer's privileges.

Both need user interaction: someone has to connect to the hostile machine or open the file. That is exactly what support desks do all day, often to machines they do not control.

The third client flaw, CVE-2026-92374 (CVSS 7.8), is a time-of-check race in the privileged helper on macOS that lets a low-privileged local user install a malicious package and become root.

Six routes to SYSTEM through the add-ons

TV-2026-1012 covers the Monitoring, Patch Management and Advanced Asset Management add-ons. All six flaws need a local user with low privileges, and all six end with code running as SYSTEM or root.

CVE	CVSS	Component	Fixed in
CVE-2026-92375	7.8	IPC between client and Monitoring (Windows, macOS, Linux)	Client 15.83, Monitoring 26.10.1
CVE-2026-92376	7.8	IPC broker impersonation, Monitoring for Windows	Monitoring 26.10.1
CVE-2026-92377	7.8	Patch Management update, DLL loaded from a temp folder (Windows)	Client 15.82
CVE-2026-111582	7.3	Monitoring installer DLL loading (Windows)	Monitoring 26.10.1
CVE-2026-111583	7.3	Advanced Asset Management installer staging folder (Windows)	Client 15.82
CVE-2026-111584	7.3	Race during Patch Management activation (Windows)	Patch Management 26.9.1

On a shared or multi-user machine, any account that can log in locally is enough. The add-ons are typically deployed by managed service providers across whole client estates, which is where a local escalation does the most damage.

Legacy lines and what to update

TeamViewer has shipped fixed builds for its legacy lines as well: 15.64.10 for Windows 7 and 8, 14.7.48868, and 13.2.36231 on Windows (13.2.154008 on Linux, 13.2.154007 on macOS). Its advice is to move to 15.83 or later, and for add-on customers to make sure both the Remote Management services and the clients are current, since several of the IPC flaws sit between the two.

Teams that let support staff connect out to customer machines should check the viewer side first, because that is where the two network-reachable flaws live. Our catalogue lists 20 remote desktop products and 14 remote monitoring and management tools. TeamViewer's previous bulletin, TV-2026-1010, came on 29 September.

Related on TrustList:

• TeamViewer fixes five vulnerabilities, including a remote session access-control bypass: update Full Client and Host to 15.82
• Ivanti Connect Secure zero-day lets attackers run commands unauthenticated
• NetScaler SAML zero-day CVE-2026-88779: check Gateway and AAA SAML configurations and upgrade to 14.1-73.41 or 13.1-64.28

Sources

• TeamViewer: TV-2026-1011, Security Update for Vulnerabilities in TeamViewer Clients, 27 October 2026
• TeamViewer: TV-2026-1012, Security Update for TeamViewer Remote Management Add-ons, 27 October 2026
• ACN (Italy): Risolte vulnerabilità in prodotti TeamViewer, 28 October 2026