TeamViewer before 15.83 can be crashed via crafted screen data (CVE-2026-111585)
A malicious host in an established support session can overflow the viewer heap; TeamViewer reports no known exploitation.
64
Vendor
TeamViewer
- Mentions · 7d5
- Mentions · 30d8
- All mentions18
- First seenAug 19, 2026
- Last mentioned1h ago
Timeline
18 articles · newest firstTeamViewer before 15.83 lets a host attack the viewer (CVE-2026-111585)
A malicious host can crash the viewer and, on Windows, Remedio showed code execution that is not yet fully remote.
66
TeamViewer clients before 15.83 let malicious hosts run code on viewers
CVE-2026-111585 is an integer overflow scored 8.8 and fixed in 15.83; TeamViewer reports no known exploitation.
68
TeamViewer flaws before 15.83 allow code execution in sessions
Three high-severity bugs score up to 8.8, and TeamViewer reported no known active exploitation.
62
TeamViewer clients before 15.83 affected by vulnerabilities, Canada warns
Windows, Linux and macOS clients and the Android app before 15.8.3 are listed, with no CVEs named.
40
TeamViewer Fixes Five Remote Access Flaws
TeamViewer patched five high-severity flaws, including local privilege escalation, in Full Client and Host.
58
Multiple TeamViewer Vulnerabilities Enable RCE, Access Control Bypass and Privilege Escalation
TeamViewer patched five high-severity flaws enabling RCE, access-control bypass, and privilege escalation.
67
Critical TeamViewer Vulnerabilities Enable Code Execution Attacks Via Remote Session
TeamViewer patched five high-severity flaws, including an 8.8 access-control bypass that could enable code execution.
64
TeamViewer urges users to patch severe flaws “as soon as possible”
TeamViewer urges immediate updates for five high-severity client and host flaws, including a remote code-execution bug.
72
TeamViewer security advisory (AV26-977)
Canada’s Cyber Centre says TeamViewer Full Client and Host have vulnerabilities and urges updates.
38
North Korean IT Workers Pay People to Sit Through Job Interviews While They Control the Computer
Silent Push found North Korean IT workers recruiting on-camera proxies for job interviews while remotely controlling the computer, defeating identity and location checks.
60
North Korean IT Workers Use AI and Remote Desktop Tools to Fake Technical Interviews
Silent Push links a Discord recruitment scheme to North Korean IT workers using AI, remote desktop tools and on-camera proxies to pass technical interviews.
60
Russian man indicted for spreading malware to 80,000 freelancers
US prosecutors indicted a Russian national for infecting roughly 80,000 freelancers with TVRAT and DarkVNC malware via fake freelance-platform accounts.
50
Russian national facing 20 years for malware campaign that infected 80,000 freelancers
US prosecutors indicted Russian national Searzhudin Aktulaev for a 2016 TVRAT malware campaign that infected 80,000 freelance platform users, carrying up to 20 years.
35
Russian Man Extradited Over Malware Campaign Targeting Freelancers
A Russian national was extradited to the US for allegedly spreading TVRAT and DarkVNC malware to 80,000 freelance platform users via Excel attachments.
35
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
US DoJ charged extradited Russian Searzhudin Aktulaev for a 2016-2017 Excel macro campaign infecting ~80,000 freelance platform users with TVRAT and DarkVNC.
25
TeamViewer security advisory (AV26-852)
Canada's Cyber Centre warns that multiple TeamViewer client products are affected by vulnerabilities, urging users to update to 15.64.7 or later.
42
Risks in IoT Supply Chain
Unit 42 analyzes multilayer IoT supply chain risks across hardware, firmware, and software, citing counterfeit Cisco switches and OpenWrt attacks.
40
Related CVEs
by mentions- Integer overflow in TeamViewer remote-control screen processing before 15.83
- Access Control Bypass in TeamViewer Full Client and Host Could Lead to RCE
- Heap buffer overflow in TeamViewer Linux and macOS clients
- Path traversal LPE in TeamViewer Full Client and Host
- TOCTOU privilege escalation in TeamViewer Windows installer
- Path validation race in TeamViewer Linux session recording
- Out-of-bounds write in TeamViewer Linux/macOS screen decoder
- TOCTOU privilege escalation in TeamViewer macOS helper before 15.83
Appears with
- TeamViewer Full Clientproduct · 10
- TeamViewer Hostproduct · 8
- DarkVNCmalware · 4
- TVRATmalware · 4
- Canadian Centre for Cyber Securityorganization · 3
- Remedioorganization · 3
- TeamSpymalware · 3
- VNC Viewerproduct · 3
- US Department of Justiceorganization · 2
- ChatGPTproduct · 2
- TeamViewer Android Remote Controlproduct · 2
- Microsoftvendor · 2
- TeamViewer Portableproduct · 2
- AnyDeskvendor · 2
- TeamViewer Windows Portableproduct · 2
- Silent Pushorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.