TeamViewer urges users to patch severe flaws “as soon as possible”

TeamViewer has pushed out an unusually urgent advisory telling customers to update their Full Client and Host software without delay after discovering five high-severity vulnerabilities. The most dangerous, CVE-2026-92370, is an access-control weakness in the Windows, Linux, and macOS clients that could allow a remote attacker to bypass session restrictions and ultimately execute code on a target machine. The remaining four bugs — a path traversal flaw (CVE-2026-19743), a heap buffer overflow (CVE-2026-92368), a race condition (CVE-2026-92369), and a path validation issue (CVE-2026-92371) — could let a local attacker run code with the logged-in user's rights or escalate to SYSTEM or root privileges. TeamViewer says it has seen no public exploit code or in-the-wild attacks so far, but is urging everyone to move to version 15.82 or the appropriate maintenance release, especially given the software's history as a target for ransomware crews and, in a prior breach, the Russian state-linked group Midnight Blizzard.