{"affected":[{"defaultStatus":"unaffected","platforms":["MacOS","Linux"],"product":"Full Client","source":"CNA: TV","vendor":"TeamViewer","versions":[{"lessThan":"15.83","status":"affected","version":"0","versionType":"custom"},{"lessThan":"14.7.48868 (Linux)","status":"affected","version":"14.7.0 (Linux)","versionType":"custom"},{"lessThan":"14.7.48868 (macOS)","status":"affected","version":"14.7.0 (macOS)","versionType":"custom"},{"lessThan":"13.2.154008 (Linux)","status":"affected","version":"13.2.0 (Linux)","versionType":"custom"},{"lessThan":"13.2.154007 (macOS)","status":"affected","version":"13.2.0 (macOS)","versionType":"custom"}]}],"cveId":"CVE-2026-92372","cwes":["CWE-123"],"description":"An out-of-bounds write vulnerability in the\nscreen-image decoder of TeamViewer Full Client for Linux and macOS prior to\nversion 15.83 allows a remote attacker to execute arbitrary code by supplying\ncrafted screen-image data during a remote-control session. The vulnerability\ncan also be exploited by persuading a user to open a specially crafted\nTeamViewer session recording (.tvs). Missing destination bounds checking in the\ndecoder allows crafted screen-image data to cause an out-of-bounds write to the\nimage buffer. Exploitation requires user interaction.","epss":{"date":"2026-11-04","percentile":0.36999,"score":0.00426},"exploits":[],"kev":null,"metrics":[{"score":8.8,"severity":"high","source":"CNA: TV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793824105133,"publishedAt":1793113708439,"references":[{"source":"CNA: TV","tags":["vendor-advisory"],"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/"}],"remediation":[{"kind":"fix","source":"CNA: TV","text":"Update to the latest available version."}],"revision":"23172202f300d16291842292959f431fcae72610a28a2f60bcff21fb7785deff","sources":[{"modifiedAt":1793824105133,"name":"CNA: TV","retrievedAt":1793826770151,"url":"https://www.cve.org/CVERecord?id=CVE-2026-92372"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793826782588,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-92372"}],"ssvc":{"assessedAt":1793817943318,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution","updatedAt":1793826782588}