TeamViewer

New Spectre-v2 Variant Uses JIT Compiler Branch Target Reuse for Cross-Process Data Extraction

Researchers from the Netherlands and Italy have published a paper detailing a fresh Spectre-v2 attack that reuses branch predictor state instead of injecting new instructions. The technique leverages the JIT compiler cBPF inside the Linux kernel to train the branch target predictor, enabling speculative execution that leaks sensitive data such as hashed root passwords. Practical demonstrations extracted credentials from the su process in an average of three to five minutes on AMD, Intel, and ARM processors. Partial success was shown with SpiderMonkey in Firefox and GraalVM, although realistic end-to-end attacks were not achieved with those engines. The work also covers additional topics including forensic detection of attacks against 1C servers, a record Debian Linux kernel patch set, zero-day fixes in TeamViewer and Apple Core Graphics, and critical flaws in Dell Container Storage Modules.

TeamViewer Patches High-Severity Flaws Allowing Remote Command Execution and Unauthorized File Writes

TeamViewer has addressed two high-severity vulnerabilities in its remote access clients that could enable attackers to execute commands and write files to unauthorized locations. The more critical issue, tracked as CVE-2026-19042 with a CVSS score of 8.8, affects Full Client and Host versions on Linux prior to 15.81.5 and permits command execution with the privileges of the logged-in user. Exploitation requires the attacker to be on the victim's contact list or for the victim to accept messages from external users. The second flaw, CVE-2026-16444 rated at CVSS 7.5, stems from improper file path validation and impacts Windows, macOS, and Linux clients before version 15.81.5, allowing path traversal sequences in transferred files or clipboard content during remote sessions. Legacy versions of TeamViewer 13, 14, and editions for Windows 7 and 8 also received targeted fixes. No active exploitation was observed at the time of disclosure, and the vendor urges immediate migration to the latest release.