**TeamViewer**, a widely used remote access software company, has alerted its customer base to a critical security update. The company is strongly recommending that all users apply patches to address several high-severity vulnerabilities affecting its client and host software across **Windows**, **Linux**, and **macOS** platforms. ### Critical Remote Access Bypass Identified The most severe of the disclosed flaws is a remote session access control bypass, tracked as **CVE-2026-92370**. This vulnerability stems from an improper access control weakness within **TeamViewer Full Client** and **Host** software. Exploitation could allow remote threat actors to perform unauthorized actions, potentially leading to remote code execution on compromised systems. ### Additional High-Severity Flaws Beyond the critical bypass, four other significant security issues were addressed: * **CVE-2026-19743**: A path traversal vulnerability. * **CVE-2026-92368**: A heap-based buffer overflow. * **CVE-2026-92369**: A time-of-check time-of-use (**TOCTOU**) race condition. * **CVE-2026-92371**: An improper path validation flaw. These vulnerabilities could enable local attackers to achieve remote code execution with the privileges of the current user, or even escalate privileges to **NT AUTHORITY/SYSTEM** or root. ### Urgent Call to Update In a rare and emphatic security advisory, **TeamViewer** stated, "TeamViewer strongly recommends that all users update to the latest available version as soon as possible." The company confirmed that "TeamViewer has released security updates addressing multiple vulnerabilities affecting TeamViewer Full Client and Host and related services." While there is currently no evidence of public exploit code or active exploitation in the wild, the urgency of the advisory underscores the potential risk. Users are advised to update to **TeamViewer version 15.82** or later, as well as supported maintenance and legacy releases, where these security flaws have been resolved. ### A History of Abuse and Breaches Despite its utility, **TeamViewer**'s software has unfortunately been a frequent target for cybercriminals, including ransomware gangs, who leverage it to gain remote access to victim systems and deploy malware. This history makes the immediate patching even more critical. Furthermore, **TeamViewer** has experienced several corporate network breaches over the past decade. A 2016 breach was later linked to Chinese threat actors using the **Winnti** backdoor malware. More recently, the company's internal corporate network was breached in an incident two years ago, which was subsequently attributed to the Russian state-backed hacking group **Midnight Blizzard** (also known as **APT29**, **Nobelium**, or **Cozy Bear**). These past incidents highlight the importance of maintaining robust security postures for remote access tools.