TeamViewer patches critical flaws that could let attackers seize control across Windows, macOS and Linux

TeamViewer released security bulletin TV-2026-1010 on Monday, detailing five high‑severity vulnerabilities discovered in its Full Client, Host and associated services.

The flaws span remote code execution, an access‑control bypass and privilege‑escalation paths, giving a potential attacker the ability to run arbitrary code, hijack sessions or gain elevated rights on compromised machines.

All three major desktop operating systems – Windows, Linux and macOS – are impacted, meaning the weaknesses affect a broad swath of corporate and personal installations that rely on TeamViewer for remote support, meetings and file transfer.

The vulnerabilities were initially reported by the independent security group GBHackers, which prompted TeamViewer to launch an internal investigation and coordinate a coordinated disclosure process before publishing the advisory.

TeamViewer urges users to install the latest patches immediately; the updates are available through the software’s built‑in updater and via the company’s download portal. Organizations with centralized management can push the new versions across fleets to reduce exposure.

Security analysts note that remote‑access tools are frequent targets for exploitation, so timely remediation is essential. Experts also recommend reinforcing network segmentation and monitoring for anomalous remote‑session activity as additional layers of defense while the broader community continues to assess the real‑world impact of the disclosed bugs.