<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>TeamViewer 15.83 fixes remote code execution in its clients and SYSTEM/root escalation in Remote Management add-ons · updates</title>
  <link>https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026</link>
  <description>On October 27 TeamViewer published two bulletins covering nine CVEs. TV-2026-1011 fixes two remote-code-execution bugs in TeamViewer clients rated CVSS 8.8: an out-of-bounds write in the screen-image decoder of the Full Client for Linux and macOS (CVE-2026-92372), reachable through crafted screen-image data in a remote-control session or a crafted .tvs session recording, and an integer overflow in remote-control screen processing in the Full Client, Portable and Android Remote Control app (CVE-2026-111585), triggered by connecting to an attacker-controlled or compromised host. Both need user interaction. It also fixes a macOS privileged-helper race (CVE-2026-92374) that lets a local user install a malicious package and get root. TV-2026-1012 fixes six local privilege escalation bugs (CVE-2026-92375, CVE-2026-92376, CVE-2026-92377, CVE-2026-111582, CVE-2026-111583, CVE-2026-111584) in the Remote Management Monitoring, Patch Management and Advanced Asset Management add-ons that can give a low-privileged local user SYSTEM or root. TeamViewer rates both bulletins Important and says it is not aware of exploitation in the wild. Update TeamViewer Full Client, Host and Portable to 15.83 (or the patched legacy builds 15.64.10, 14.7.48868 and 13.2.x); the add-on fixes (Monitoring 26.10.1, Patch Management 26.9.1) arrive by auto-update.</description>
  <language>en</language>
  <lastBuildDate>Tue, 27 Oct 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>TeamViewer 15.83 fixes remote code execution in its clients and SYSTEM/root escalation in Remote Management add-ons: TeamViewer publishes TV-2026-1011 (client RCEs CVE-2026-92372 and CVE-2026-111585 plus macOS root escalation CVE-2026-92374, fixed in 15.83) and TV-2026-1012 (six Remote Management add-on privilege escalations), both rated Important with no known exploitation.</title>
    <link>https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026#2026-10-27-1aaaef6f</guid>
    <pubDate>Tue, 27 Oct 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
