7.8Alta
CVE-2026-92374Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS
Descripción
A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.
Debilidad (CWE):
CWE-367
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| TeamViewer | Full Client | < 15.83, 14.7.0 – < 14.7.48868, 13.2.0 – < 13.2.154007 | |
| TeamViewer | Host | < 15.83, 14.7.0 – < 14.7.48868, 13.2.0 – < 13.2.154007 |