CVE-2026-92368CWE-122

CVE-2026-92368

High · published September 29, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00141 · 3.1th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-09-29T20:17Z
References (1)
EPSS history
Timeline
  • 01 OCT 03:50Z
    EPSS moved — → 0%
    epss
  • 29 SEP 15:40Z
    Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution
    cvelistv5