TeamViewer clients before 15.83 let malicious hosts run code on viewers
Original title: TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
CVE-2026-111585 is an integer overflow scored 8.8 and fixed in 15.83; TeamViewer reports no known exploitation.
Remedio says a malicious or compromised TeamViewer host can overflow the viewer's screen buffer during a normal remote-control session and run arbitrary code. The path is used when hardware video decoding is unavailable, and a host can refuse codec negotiation to force it. Version 15.83 patches Full Client, Host, Portable, and the Android Remote Control App. macOS and Linux updates also fix CVE-2026-92372, macOS fixes local-root bug CVE-2026-92374, and six high-severity Remote Management privilege escalations were patched.
Unconfirmed: TeamViewer says it is not aware of exploitation; the code-execution result is Remedio's account.
- A 32768-by-32768 surface at 32 bits per pixel is cited as overflowing.
- Remedio says overwriting a surface pointer redirected a call to WinExec.
- CVE-2026-92372 is an out-of-bounds write via screen data or a .tvs file.
- CVE-2026-92374 is a macOS TOCTOU symlink bug that can yield root.
- TeamViewer also shipped fixes for multiple legacy client versions.
Impact: Crash the viewer or execute arbitrary code on it
| Product | Affected | Fixed in |
|---|---|---|
| TeamViewer clients | before 15.83 on Windows, macOS, Linux, and Android (Full Client, Host, Portable, Android Remote Control App) | 15.83 |
| TeamViewer for macOS and Linux | — | — |
| TeamViewer for macOS | — | — |
| TeamViewer Remote Management add-ons | — | latest versions |
- 1.Update TeamViewer clients to 15.83, including legacy versions that received fixes.
- 2.Update TeamViewer Remote Management add-ons to the latest versions.
- ATT&CK
- T1203 Exploitation for Client ExecutionT1204.002 Malicious FileT1068 Exploitation for Privilege Escalation
- Vendors
- TeamViewer
- Organizations
- Remedio
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-111585 | Integer overflow in TeamViewer remote-control screen processing before 15.83 | 8.8 | — | ||
| CVE-2026-92372 | Out-of-bounds write in TeamViewer Linux/macOS screen decoder | 8.8 | — | ||
| CVE-2026-92374 | TOCTOU privilege escalation in TeamViewer macOS helper before 15.83 | 7.8 | — |
From the original article
3 min read at securityweek.com
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.