# TeamViewer 15.83 fixes remote code execution in its clients and SYSTEM/root escalation in Remote Management add-ons · pwn.watch > On October 27 TeamViewer published two bulletins covering nine CVEs. TV-2026-1011 fixes two remote-code-execution bugs in TeamViewer clients rated CVSS 8.8: an out-of-bounds write in the screen-image decoder of the Full Client for Linux and macOS (CVE-2026-92372), reachable through crafted screen-image data in a remote-control session or a crafted .tvs session recording, and an integer overflow in remote-control screen processing in the Full Client, Portable and Android Remote Control app (CVE-2026-111585), triggered by connecting to an attacker-controlled or compromised host. Both need user interaction. It also fixes a macOS privileged-helper race (CVE-2026-92374) that lets a local user install a malicious package and get root. TV-2026-1012 fixes six local privilege escalation bugs (CVE-2026-92375, CVE-2026-92376, CVE-2026-92377, CVE-2026-111582, CVE-2026-111583, CVE-2026-111584) in the Remote Management Monitoring, Patch Management and Advanced Asset Management add-ons that can give a low-privileged local user SYSTEM or root. TeamViewer rates both bulletins Important and says it is not aware of exploitation in the wild. Update TeamViewer Full Client, Host and Portable to 15.83 (or the patched legacy builds 15.64.10, 14.7.48868 and 13.2.x); the add-on fixes (Monitoring 26.10.1, Patch Management 26.9.1) arrive by auto-update. Page: https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026 · generated 2026-10-27T18:18:44.616Z ## Status - Severity: high · status: live · patch: patched - Product: TeamViewer Remote, Tensor and ONE clients and Remote Management add-ons - Started: 2026-10-27 - CVEs: CVE-2026-92372, CVE-2026-111585, CVE-2026-92374, CVE-2026-92375, CVE-2026-92376, CVE-2026-92377, CVE-2026-111582, CVE-2026-111583, CVE-2026-111584 - Affected: TeamViewer Full Client and Host before 15.83 (Windows, Linux, macOS); TeamViewer Portable before 15.83; TeamViewer Remote Control app for Android before 15.83; Legacy TeamViewer 15.64, 14.7 and 13.2 builds before the patched maintenance releases; Remote Management Monitoring add-on before 26.10.1; Remote Management Patch Management add-on before 26.9.1 (24.12.5 for client 14.7) - Fixed in: TeamViewer Full Client, Host and Portable 15.83; TeamViewer Remote Control app for Android 15.83; Legacy 15.64.10 (Windows 7 and 8), 14.7.48868, 13.2.36231 (Windows), 13.2.154008 (Linux), 13.2.154007 (macOS); Monitoring add-on 26.10.1 (auto-update); Patch Management add-on 26.9.1, or 24.12.5 for client 14.7 (auto-update) ## Follow this incident - RSS (one item per update): https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026/feed.xml - JSON Feed: https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026.json - This file: https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026/llms.txt ## Updates (newest first) - 2026-10-27: TeamViewer publishes TV-2026-1011 (client RCEs CVE-2026-92372 and CVE-2026-111585 plus macOS root escalation CVE-2026-92374, fixed in 15.83) and TV-2026-1012 (six Remote Management add-on privilege escalations), both rated Important with no known exploitation. (https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/) ## Fix brief # Security brief: TeamViewer 15.83 fixes remote code execution in its clients and SYSTEM/root escalation in Remote Management add-ons Source: https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026 · status: live · severity: high · updated Oct 27, 2026, 16:35 UTC ## Patch status **PATCHED: fixed releases exist. Upgrade to a fixed version.** ## What it is On October 27 TeamViewer published two bulletins covering nine CVEs. TV-2026-1011 fixes two remote-code-execution bugs in TeamViewer clients rated CVSS 8.8: an out-of-bounds write in the screen-image decoder of the Full Client for Linux and macOS (CVE-2026-92372), reachable through crafted screen-image data in a remote-control session or a crafted .tvs session recording, and an integer overflow in remote-control screen processing in the Full Client, Portable and Android Remote Control app (CVE-2026-111585), triggered by connecting to an attacker-controlled or compromised host. Both need user interaction. It also fixes a macOS privileged-helper race (CVE-2026-92374) that lets a local user install a malicious package and get root. TV-2026-1012 fixes six local privilege escalation bugs (CVE-2026-92375, CVE-2026-92376, CVE-2026-92377, CVE-2026-111582, CVE-2026-111583, CVE-2026-111584) in the Remote Management Monitoring, Patch Management and Advanced Asset Management add-ons that can give a low-privileged local user SYSTEM or root. TeamViewer rates both bulletins Important and says it is not aware of exploitation in the wild. Update TeamViewer Full Client, Host and Portable to 15.83 (or the patched legacy builds 15.64.10, 14.7.48868 and 13.2.x); the add-on fixes (Monitoring 26.10.1, Patch Management 26.9.1) arrive by auto-update. Severity detail: CVSS 3.1 up to 8.8 (High) for the client RCEs, 7.3 to 7.8 for the local privilege escalations; TeamViewer priority Important; no exploitation in the wild known at publication - Product: TeamViewer Remote, Tensor and ONE clients and Remote Management add-ons - CVE / advisory ids: CVE-2026-92372, CVE-2026-111585, CVE-2026-92374, CVE-2026-92375, CVE-2026-92376, CVE-2026-92377, CVE-2026-111582, CVE-2026-111583, CVE-2026-111584 ## Affected versions - TeamViewer Full Client and Host before 15.83 (Windows, Linux, macOS) - TeamViewer Portable before 15.83 - TeamViewer Remote Control app for Android before 15.83 - Legacy TeamViewer 15.64, 14.7 and 13.2 builds before the patched maintenance releases - Remote Management Monitoring add-on before 26.10.1 - Remote Management Patch Management add-on before 26.9.1 (24.12.5 for client 14.7) ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix Upgrade to one of these fixed versions (or later on the same branch): - TeamViewer Full Client, Host and Portable 15.83 - TeamViewer Remote Control app for Android 15.83 - Legacy 15.64.10 (Windows 7 and 8), 14.7.48868, 13.2.36231 (Windows), 13.2.154008 (Linux), 13.2.154007 (macOS) - Monitoring add-on 26.10.1 (auto-update) - Patch Management add-on 26.9.1, or 24.12.5 for client 14.7 (auto-update) After upgrading, re-run the checks above and redeploy/restart the affected services. ## Latest updates - Oct 27, 2026: TeamViewer publishes TV-2026-1011 (client RCEs CVE-2026-92372 and CVE-2026-111585 plus macOS root escalation CVE-2026-92374, fixed in 15.83) and TV-2026-1012 (six Remote Management add-on privilege escalations), both rated Important with no known exploitation. ## Advisories - [TV-2026-1011: Security Update for Vulnerabilities in TeamViewer Clients](https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/) (TeamViewer) - [TV-2026-1012: Security Update for TeamViewer Remote Management Add-ons](https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1012/) (TeamViewer) - [TeamViewer security bulletins](https://www.teamviewer.com/en/resources/trust-center/security-bulletins/) (TeamViewer) --- Machine-readable: https://pwn.watch/i/teamviewer-15-83-security-update-oct-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.