Multiple TeamViewer Vulnerabilities Enable RCE, Access Control Bypass and Privilege Escalation

TeamViewer published security bulletin TV-2026-1010 detailing five high-severity vulnerabilities affecting Full Client and Host on Windows, Linux, and macOS — including CVE-2026-19743 (path traversal enabling privileged file writes), CVE-2026-92368 (heap-based buffer overflow in .tvs session recordings leading to RCE), CVE-2026-92369 (installer rollback race condition enabling privilege escalation), CVE-2026-92370 (access-control bypass that may lead to RCE), and CVE-2026-92371 (Linux cloud recording privilege escalation). The bulletin advises upgrading to TeamViewer 15.82 or applying specified maintenance patches, restricting local access, limiting remote-session permissions, and treating unsolicited .tvs files as untrusted.