TeamViewer before 15.83 lets a host attack the viewer (CVE-2026-111585)
Original title: TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
A malicious host can crash the viewer and, on Windows, Remedio showed code execution that is not yet fully remote.
TeamViewer fixed CVE-2026-111585, scored 8.8, in version 15.83. During a remote-control session, the controlled host can send a screen size that overflows the viewer's memory calculation, so later screen data is written past the buffer. That can crash TeamViewer on the viewer and, depending on platform, run code. TeamViewer said it knew of no attacks when the fix shipped, and Remedio released no exploit code.
Unconfirmed: Code execution beyond Windows is unconfirmed; Remedio's Windows demo used a host-side stand-in and was not fully over the network.
- Affected builds are Full Client on Windows, Linux, and macOS, Windows Portable, and the Android Remote Control app, all before 15.83.
- The September 15.82 security update did not remove this flaw.
- The same 15.83 release fixes two other high-severity flaws, including code execution on Linux and macOS Host.
- Bulletin TV-2026-1012 fixes six more flaws in Remote Management add-ons via automatic update.
- TeamViewer lists no workaround; the flaw is not in CISA's KEV as of the October 29 listing.
Impact: Crash the viewer or run code on it during a session
| Product | Affected | Fixed in |
|---|---|---|
| TeamViewer Full Client | all versions before 15.83 on Windows, Linux, and macOS | 15.83 |
| TeamViewer Windows Portable | all versions before 15.83 | 15.83 |
| TeamViewer Android Remote Control | all versions before 15.83 | 15.83 |
- 1.Update current clients to TeamViewer 15.83 or later; no workaround is listed.
- 2.Update the Host as well, because 15.83 also fixes other Host flaws.
- CVEs
- CVE-2026-111585
- Vendors
- TeamViewer
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-111585 | Integer overflow in TeamViewer remote-control screen processing before 15.83 | 8.8 | — |
From the original article
2 min read at thehackernews.com
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host. A malicious or compromised host can exploit the flaw to crash the viewer's TeamViewer and, depending on the platform, may also run
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.