Vulnerability · Published Oct 27, 2026 · Assigned by TV
CVE-2026-111585Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
High 8.8
In plain English
A high-severity integer overflow in Full Client from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TeamViewer | Full Client | 0 – before 15.8315.64.0 (Legacy Windows 7 & 8) – before 15.64.10 (Legacy Windows 7 & 8)14.7.0 (Windows) – before 14.7.48868 (Windows)14.7.0 (Linux) – before 14.7.48868 (Linux)14.7.0 (macOS) – before 14.7.48868 (macOS)13.2.0 (Windows) – before 13.2.36231 (Windows)13.2.0 (Linux) – before 13.2.154008 (Linux)13.2.0 (macOS) – before 13.2.154007 (macOS) |
| TeamViewer | Portable | 0 – before 15.8315.64.0 (Legacy Windows 7 & 8) – before 15.64.10 (Legacy Windows 7 & 8) |
| TeamViewer | Remote Control | 0 – before 15.83 |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H