Live › vulnerability › CVE-2026-111585
Go to dashboardTeamViewer clients before 15.83 contain an integer overflow in the remote-control screen processing component. A malicious or compromised remote host can cause a denial of service or, depending on the platform, run arbitrary code with the viewer process's privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Any machine running a TeamViewer client older than 15.83 that starts remote-control sessions is exposed, since the flaw is triggered by screen data from the host being controlled. Exploitation requires a user to establish a session to an attacker-controlled or compromised host, so the risk sits with machines that connect out to others. Systems that only receive remote control from a fully trusted, patched source have less exposure, but the sources do not describe a safe configuration beyond the version.
No product ranges from the sources yet.
15.83 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.
This page as .md · .json · in your agent: get_signal("CVE-2026-111585")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.