Veille CVE

‹ Retour à la liste

CVE-2026-92370

8.8 Élevée

Publiée le 29/09/2026 à 18:17 · Modifiée le 30/09/2026 à 18:19 · Analyse NVD reportée · Source : psirt@teamviewer.com

Description

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
3.1 8.8 Élevée psirt@teamviewer.com CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Faiblesses (CWE)

Références

Ailleurs