TeamViewer clients before 15.83 let malicious hosts run code on viewers
CVE-2026-111585 is an integer overflow scored 8.8 and fixed in 15.83; TeamViewer reports no known exploitation.
68
Vulnerability1 · 1 read
CVE-2026-92372
Out-of-bounds write in TeamViewer Linux/macOS screen decoder
- CVSS 3.1
- 8.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
An out-of-bounds write in the screen-image decoder of TeamViewer Full Client for Linux and macOS before 15.83 lets a remote attacker run arbitrary code by sending crafted screen-image data during a remote-control session. The same flaw can be triggered if a user opens a specially crafted TeamViewer session recording (.tvs). No privileges are required, but the user must interact. Only those Full Client builds are affected.
What to do: Upgrade TeamViewer Full Client for Linux and macOS to version 15.83 or later.
| Product | Affected | Fixed in |
|---|---|---|
| TeamViewer Full Client for Linux and macOS | prior to 15.83 | 15.83 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.
- Weakness
- CWE-123
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news
2 storiesTeamViewer flaws before 15.83 allow code execution in sessions
Three high-severity bugs score up to 8.8, and TeamViewer reported no known active exploitation.
62