Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
‼️ Connecting to the wrong computer with TeamViewer could get yours hacked. CVE-2026-92372 lets an attacker run code on TeamViewer's Mac and Linux client by feeding it crafted screen images during a remote session. https://t.co/zlnSBAKOpL
TeamViewer fixed CVE-2026-92372, a high-severity vulnerability (CVSS 8.8) that could allow remote code execution on Linux and macOS clients through crafted screen-image data during a remote session. Update to TeamViewer 15.83 or the applicable fixed legacy version. https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/
Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374. #TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/
🔴 TeamViewer'daki CVE-2026-92372 - CVSS 8.8 RCE Açığı Linux ve macOS sürümlerini etkiliyor. Bu açık, TeamViewer Full Client'ın ekran görüntüsü decoder bileşenindeki Out-of-bounds Write zafiyeti nedeniyle uzaktan kod çalıştırılmasına (RCE) yol açabiliyor. Saldırganın özel olarak hazırladığı ekran verisi, TeamViewer'ın bellek sınırlarını aşmasına ve uzaktan kod çalıştırılmasına neden olabiliyor. Saldırı senaryoları: • Uzaktan kontrol oturumu sırasında özel hazırlanmış ekran görüntüsü verisi gönderilmesi. • Kullanıcının zararlı bir TeamViewer oturum kaydını (.tvs) açmaya ikna edilmesi. 📌 Yama: TeamViewer 15.83 ve ilgili eski sürüm dallarındaki güvenlik güncellemeleri mevcut. Güvenlik bülteni: https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/
TeamViewer’s Oct 27 security update fixes two high-severity screen-processing flaws. CVE-2026-92372 can execute code on Linux/macOS through a remote session or a crafted .tvs recording. CVE-2026-111585 can crash a viewer or potentially execute code when it connects to an attacker-controlled host. Both require user interaction. Update to 15.83 or the fixed legacy build listed for your platform. TeamViewer reports no known active exploitation. https://www.teamviewer.com/pt/resources/trust-center/security-bulletins/tv-2026-1011/
Mac or Linux TeamViewer users: update to 15.83 now. CVE-2026-92372 (CVSS 8.8) lets an attacker run code on your machine through crafted screen images during a remote session, or a booby-trapped .tvs recording. No exploitation seen yet, TeamViewer says. https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/