CVE-2026-923747.8High
Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS
TeamViewer · Full Client
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
7.8HighCVSS
LowMediumHighCrit.
DescriptionNVD
A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 28 Oct.
- TeamViewer patches three flaws enabling code execution and escalationSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.