TeamViewer clients before 15.83 let malicious hosts run code on viewers
CVE-2026-111585 is an integer overflow scored 8.8 and fixed in 15.83; TeamViewer reports no known exploitation.
68
Vulnerability1 · 1 read
CVE-2026-111585
Integer overflow in TeamViewer remote-control screen processing before 15.83
- CVSS 3.1
- 8.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
An integer overflow in the remote-control screen processing component of TeamViewer Full Client, Portable, and Remote Control App before 15.83 can be triggered by a malicious remote host. A user must start a remote-control session to an attacker-controlled or compromised host. That can cause denial of service or, depending on the platform, run code with the viewer process privileges.
What to do: Upgrade TeamViewer Full Client, Portable, and Remote Control App to version 15.83 or later.
| Product | Affected | Fixed in |
|---|---|---|
| TeamViewer clients (Full Client, Portable and Remote Control App) | prior to 15.83 | 15.83 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.
- Weakness
- CWE-190
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news
3 storiesTeamViewer before 15.83 lets a host attack the viewer (CVE-2026-111585)
A malicious host can crash the viewer and, on Windows, Remedio showed code execution that is not yet fully remote.
66
TeamViewer flaws before 15.83 allow code execution in sessions
Three high-severity bugs score up to 8.8, and TeamViewer reported no known active exploitation.
62