Vendor

TeamViewer

No CISA KEV deadline is open. CISA last added a TeamViewer CVE on 3 Nov 2021.

Tracked since 27 Aug · latest article Thu 1 Oct · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 1 in the full CISA catalogue · all time
High exploit odds · current: 0; EPSS top 5%, not in KEV
Articles · 7 days: 0; none this week

Exploited, by due date

CSV download

CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2019-18988not in CyberSIXT coverageDesktop3 Nov 2021Deadline passed 3 May 2022

Products

2 products · 6 CVEs in coverage

Desktop0 CVEs · 1 in KEV Full Client6 CVEs · 0 in KEVlatest 1 Oct

Trends

Added to CISA KEV per quarter

Q1 2025Q4 2026

Show as table

Added to CISA KEV per quarter
Period	Count
Q1 2025	0
Q2 2025	0
Q3 2025	0
Q4 2025	0
Q1 2026	0
Q2 2026	0
Q3 2026	0
Q4 2026	0

CVEs in coverage by publication month

Publication dates are still being collected (0 of 6).

FIRST EPSS percentiles across CVEs in coverage

05095 · 100th percentile

Show as table

FIRST EPSS percentiles across CVEs in coverage
CVE	EPSS percentile
CVE-2026-19042	77.9
CVE-2026-92370	36.1
CVE-2026-92368	4.4
CVE-2026-19743	3.8
CVE-2026-92371	1.5
CVE-2026-92369	0.6

Fix listed for 6 of 6 CVEs in coverage.

Coverage

3 articles · all timeFull timeline

Three articles so far, 27 Aug to 1 Oct.

1 2 3

Thu 27 Aug · first reportTeamViewer fixes critical command injection, path traversal bugsSecurityOnline
Wed 30 SepTeamViewer Fixes Five Flaws That Could Enable Remote Code ExecutionSecurityOnline
Thu 1 OctTeamViewer Fixes Flaw Allowing Remote Attackers to Bypass PermissionsSOCRadar

All CVEs in coverage

CVE-2026-19042Command Injection in TeamViewer Desktop Client for Linux through Chat Link HandlingCVSS8.8High–Not in KEV1.8%EPSS1article

CVE-2026-92370Remote Session Access Control Bypass Leading to Remote Code ExecutionCVSS8.8High–Not in KEV0.4%EPSS2articles

CVE-2026-92368Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code ExecutionCVSS7.8High–Not in KEV0.1%EPSS2articles

CVE-2026-19743Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop ClientsCVSS7.8High–Not in KEV0.1%EPSS2articles

CVE-2026-92371Local Privilege Escalation via Improper Link Resolution in Cloud Session RecordingCVSS7.0High–Not in KEV0.1%EPSS2articles

CVE-2026-92369Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege EscalationCVSS7.3High–Not in KEV0.1%EPSS2articles

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

TeamViewer

Exploited, by due date

Products

Trends

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts