All vulnerabilities
CVE-2026-111585

Full Client: Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

TeamViewer Full Client
CVSS
8.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in15.83Also 15.64.10 (Legacy Windows 7 & 8), 14.7.48868 (Windows) and 5 moreCVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

Show all 11 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Description

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

Text from CVE List

Affected versions 11

  • Full Clientaffected: all versions before 15.83CVE List
  • Full Clientaffected: 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8)CVE List
  • Full Clientaffected: 14.7.0 (Windows) before 14.7.48868 (Windows)CVE List
  • Full Clientaffected: 14.7.0 (Linux) before 14.7.48868 (Linux)CVE List
  • Full Clientaffected: 14.7.0 (macOS) before 14.7.48868 (macOS)CVE List
  • Full Clientaffected: 13.2.0 (Windows) before 13.2.36231 (Windows)CVE List
  • Full Clientaffected: 13.2.0 (Linux) before 13.2.154008 (Linux)CVE List
  • Full Clientaffected: 13.2.0 (macOS) before 13.2.154007 (macOS)CVE List
  • Portableaffected: all versions before 15.83CVE List
  • Portableaffected: 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8)CVE List
  • Remote Controlaffected: all versions before 15.83CVE List

References 1