https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-109390.htmlhttps://patchthecve.com/cve/CVE-2026-109390.htmlFri, 16 Oct 2026 17:25:57 +0000CRITICAL 9.8: AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload lenhttps://patchthecve.com/cve/CVE-2026-92371.htmlhttps://patchthecve.com/cve/CVE-2026-92371.htmlWed, 30 Sep 2026 16:19:25 +0000HIGH 7.0: TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged fhttps://patchthecve.com/cve/CVE-2026-92370.htmlhttps://patchthecve.com/cve/CVE-2026-92370.htmlWed, 30 Sep 2026 16:19:25 +0000HIGH 8.8: An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restrictehttps://patchthecve.com/cve/CVE-2026-92369.htmlhttps://patchthecve.com/cve/CVE-2026-92369.htmlWed, 30 Sep 2026 16:19:24 +0000HIGH 7.3: TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer, rehttps://patchthecve.com/cve/CVE-2026-92368.htmlhttps://patchthecve.com/cve/CVE-2026-92368.htmlWed, 30 Sep 2026 16:19:24 +0000HIGH 7.8: TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user tohttps://patchthecve.com/cve/CVE-2026-19743.htmlhttps://patchthecve.com/cve/CVE-2026-19743.htmlWed, 30 Sep 2026 16:17:12 +0000HIGH 7.8: Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPhttps://patchthecve.com/cve/CVE-2026-19042.htmlhttps://patchthecve.com/cve/CVE-2026-19042.htmlTue, 01 Sep 2026 20:50:58 +0000HIGH 8.8: A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user interhttps://patchthecve.com/cve/CVE-2026-16444.htmlhttps://patchthecve.com/cve/CVE-2026-16444.htmlTue, 01 Sep 2026 20:50:58 +0000HIGH 7.5: Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can leverage https://patchthecve.com/cve/CVE-2026-2695.htmlhttps://patchthecve.com/cve/CVE-2026-2695.htmlMon, 26 Oct 2026 17:10:03 +0000MEDIUM 6.3: A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could https://patchthecve.com/cve/CVE-2026-0747.htmlhttps://patchthecve.com/cve/CVE-2026-0747.htmlMon, 26 Oct 2026 22:10:00 +0000LOW 3.3: Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 2025.3.24.0 through 2025.3.28.0 on Windows allows an external observer to view a password on screen via a defective masking feature, for example during physical observation or screen s