CVE-2026-92374
Awaiting Analysis Awaiting Analysis - Queue

Privileged Helper TOCTOU Race Condition in TeamViewer macOS Client

Publication date: 2026-10-27

Last updated on: 2026-10-27

Assigner: TeamViewer Germany GmbH

Description
A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-27
Last Modified
2026-10-27
Generated
2026-11-01
AI Q&A
2026-10-27
EPSS Evaluated
2026-10-31
NVD
CVE-2026-92374
EUVD
EUVD-2026-111074

Affected Vendors & Products

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-367 The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host for macOS. It allows a local attacker with low privileges to bypass installer package verification and install a malicious package, potentially leading to local privilege escalation to root.

Detection Guidance

This vulnerability involves a TOCTOU race condition and improper symbolic link handling in TeamViewer's privileged helper for macOS. Detection requires checking TeamViewer versions and inspecting system logs for suspicious installer package activities. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain root access on your system, enabling them to install malicious software, modify system files, or perform other unauthorized actions with full system control.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized privilege escalation to root on macOS systems. Such access could lead to unauthorized data access, modification, or exfiltration, violating confidentiality and integrity requirements under these regulations.

Mitigation Strategies

Update TeamViewer Full Client or Host for macOS to version 15.83 or later to address the TOCTOU race condition and symbolic link handling issues.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92374. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...