TeamViewer flaw CVE-2026-111585 lets malicious hosts run code on technicians' machines
VULNERABILITYCVE-2026-111585redteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
CVE-2026-111585 is an integer overflow in TeamViewer's viewer that a malicious host can trigger through screen data sent during a remote session. The buffer size is calculated with 32-bit arithmetic, so oversized screen dimensions cause a memory miscalculation, leading to heap corruption and a possible code execution route. TeamViewer rates it High (CVSS 8.8) and says there is no known active exploitation.
For IT people · Written by AI from 2 sources · Wrong?
What to do
- Update TeamViewer Full Client to version 15.83 or the latest available release.
- Install the matching fixed maintenance build listed in bulletin TV-2026-1011 for legacy deployments.
- Check portable copies and Android Remote Control installs, which are also affected.
- Avoid connecting to untrusted or unknown remote hosts until the viewer is updated.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 2 outlets
SecurityWeekCyber Security News
Who and what is in it
Products