Loading vulnerability…
Local Root Privilege Escalation in TeamViewer macOS Privileged Helper
CVE-2026-92374 is a time-of-check time-of-use race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host for macOS before version 15.83, including affected 14.7 and 13.2 legacy releases. A low-privileged local attacker can exploit the interval between installer package verification and use to bypass verification and install a malicious package, potentially escalating privileges to root. Exploitation requires no user interaction.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can elevate a low-privileged local attacker to root, compromising system confidentiality, integrity, and availability. The vulnerability is rated High with a CVSS v3.1 score of 7.8 and vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Patch, then assume compromise.
Update TeamViewer Full Client and Host for macOS to version 15.83 or a later fixed release. For retained legacy branches, install version 14.7.48868 or the macOS-specific version 13.2.154007, as applicable. Check both Full Client and Host installations to ensure all affected components are updated.
No public exploits tracked yet. Mallory keeps watching.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.