Veille CVE

‹ Retour à la liste

CVE-2026-92368

7.8 Élevée

Publiée le 29/09/2026 à 18:17 · Modifiée le 30/09/2026 à 18:19 · Analyse NVD reportée · Source : psirt@teamviewer.com

Description

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
3.1 7.8 Élevée psirt@teamviewer.com CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Faiblesses (CWE)

Références

Ailleurs