TeamViewer and Microsoft issue urgent security patches for high-severity flaws

TeamViewer has issued an urgent advisory for users to patch high-severity vulnerabilities affecting its Full Client and Host software on Windows, Linux, and macOS. The most critical flaw, CVE-2026-92370, involves a remote session access control bypass that could allow unauthorized remote code execution. Other identified issues include path traversal, heap-based buffer overflow, and race conditions. While TeamViewer reports no evidence of active exploitation in the wild, it strongly recommends updating to version 15.82 immediately.

Separately, the Indian Computer Emergency Response Team (CERT-In) has issued a high-severity advisory regarding a Microsoft Outlook vulnerability, tracked as CVE-2026-70125. This flaw allows remote attackers to execute arbitrary code through specially crafted files or email messages. The vulnerability affects users of Microsoft 365 Apps and Office LTSC 2021 and 2024. CERT-In and Microsoft urge both individual users and enterprise organizations to apply official security patches to prevent attackers from gaining access to sensitive data.