Integer overflow in TeamViewer products - CVE-2026-111585
Published: October 28, 2026
Vulnerability details
The vulnerability allows a remote attacker to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process.
The vulnerability exists due to an integer overflow leading to a heap-based buffer overflow in the TeamViewer remote-control screen processing component when decompressing screen data. A remote attacker can supply crafted screen data from an attacker-controlled or compromised host after persuading a user to establish a remote-control session to that host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process.
Affected software
TeamViewer Host for macOS
TeamViewer Full Client for macOS
TeamViewer Host for Linux
TeamViewer Full Client for Linux
TeamViewer Remote Host for Windows
How to mitigate CVE-2026-111585
TeamViewer Remote Host for Windows - addressed in versions 13.2.36231, 14.7.48868, 15.64.10, 15.83
TeamViewer Host for macOS - addressed in versions 13.2.154007, 14.7.259386, 15.83
TeamViewer Full Client for macOS - addressed in versions 13.2.154007, 14.7.259386, 15.83
TeamViewer Host for Linux - addressed in versions 13.2.154008, 14.7.48868, 15.83
TeamViewer Full Client for Linux - addressed in versions 13.2.154008, 14.7.48868, 15.83