High severity · published Oct 27, 2026
CVE-2026-111585
Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
New
8.8
CVSS
–
EPSS
No
On KEV
Description
An integer overflow in the remote-control
screen processing component of TeamViewer clients (Full Client, Portable and Remote
Control App) prior to version 15.83 may allow a malicious remote host to cause
a denial of service or, depending on the platform, potentially execute
arbitrary code with the privileges of the viewer process. Exploitation requires
a user to establish a remote-control session to an attacker-controlled or
compromised host.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Full Client · TeamViewer
before 15.83; 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8); 14.7.0 (Windows) before 14.7.48868 (Windows); 14.7.0 (Linux) before 14.7.48868 (Linux); 14.7.0 (macOS) before 14.7.48868 (macOS); 13.2.0 (Windows) before 13.2.36231 (Windows); +2 more · source: vendor
PO
Portable · TeamViewer
before 15.83; 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8) · source: vendor
RC
Remote Control · TeamViewer
before 15.83 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-111585
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-111585
www.teamviewer.com
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/
More from Full Client
8.8
CVE-2026-92372
Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
8.8
CVE-2026-92370
Remote Session Access Control Bypass Leading to Remote Code Execution
8.8
CVE-2026-19042
Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
7.8
CVE-2026-92377
Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
7.8
CVE-2026-92375
Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
