TeamViewer before 15.83 can be crashed via crafted screen data (CVE-2026-111585)
Original title: New TeamViewer Security Flaw Could Turn Routine Remote Support Sessions Into Computer Takeovers
A malicious host in an established support session can overflow the viewer heap; TeamViewer reports no known exploitation.
Remedio disclosed CVE-2026-111585 on October 29 after TeamViewer fixed it on October 27. A malicious or compromised host in a remote support session can send crafted DisplayParams so the viewer’s bitmap buffer calculation wraps, corrupting heap memory and potentially running code as the viewer process. TeamViewer rates the issue High with CVSS 8.8 and says it knew of no active exploitation when bulletin TV-2026-1011 was published.
Unconfirmed: Remedio’s Windows code-execution demo used a host-side hook in place of the network payload and heap setup, so the end-to-end attack’s completeness is unclear.
- Full Client builds before 15.83 on Windows, Linux, and macOS are affected.
- Windows Portable and Android Remote Control are also listed as affected.
- The fix is version 15.83, the latest release, or the matching legacy maintenance build.
- Remedio first reported the issue on August 14.
- Code runs with the viewer process’s permissions, not automatically as SYSTEM or root.
Impact: Heap corruption and possible code execution on the technician’s viewer
| Product | Affected | Fixed in |
|---|---|---|
| TeamViewer Full Client | before 15.83 on Windows, Linux, and macOS | 15.83 or latest; matching legacy maintenance build |
| TeamViewer Windows Portable | — | 15.83 or latest available release |
| TeamViewer Android Remote Control | — | 15.83 or latest available release |
- 1.Install TeamViewer 15.83, the latest release, or the bulletin’s matching legacy build.
- 2.Update viewer software before connecting support sessions to untrusted computers.
- CVEs
- CVE-2026-111585
- Vendors
- TeamViewer
- Organizations
- Remedio
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-111585 | Integer overflow in TeamViewer remote-control screen processing before 15.83 | 8.8 | — |
From the original article
3 min read at cybersecuritynews.com
A newly disclosed TeamViewer vulnerability could let an attacker turn a routine remote support session against the technician providing help. Tracked as CVE-2026-111585, the flaw allows a malicious remote computer to crash the viewer application and potentially run code on the technician’s machine. TeamViewer rates it High, with a CVSS score of 8.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.