Integer overflow in TeamViewer products - CVE-2026-111585

 

Integer overflow in TeamViewer products - CVE-2026-111585

Published: October 28, 2026


Vulnerability identifier: #VU158337
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-111585
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process.

The vulnerability exists due to an integer overflow leading to a heap-based buffer overflow in the TeamViewer remote-control screen processing component when decompressing screen data. A remote attacker can supply crafted screen data from an attacker-controlled or compromised host after persuading a user to establish a remote-control session to that host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process.


Affected software

TeamViewer Remote Full Client for Windows
TeamViewer Host for macOS
TeamViewer Full Client for macOS
TeamViewer Host for Linux
TeamViewer Full Client for Linux
TeamViewer Remote Host for Windows

How to mitigate CVE-2026-111585

Install security update from vendor's website.

TeamViewer Remote Full Client for Windows - addressed in versions 13.2.36231, 14.7.48868, 15.64.10, 15.83
TeamViewer Remote Host for Windows - addressed in versions 13.2.36231, 14.7.48868, 15.64.10, 15.83
TeamViewer Host for macOS - addressed in versions 13.2.154007, 14.7.259386, 15.83
TeamViewer Full Client for macOS - addressed in versions 13.2.154007, 14.7.259386, 15.83
TeamViewer Host for Linux - addressed in versions 13.2.154008, 14.7.48868, 15.83
TeamViewer Full Client for Linux - addressed in versions 13.2.154008, 14.7.48868, 15.83

External References

Related Security Bulletins