CVE-2026-111585
Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.
| CWE | CWE-190 |
| Vendor | teamviewer |
| Product | full client |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for teamviewer full client
Be the first to know when new high vulnerabilities affecting teamviewer full client are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
TeamViewer / Full Client
0 < 15.83 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8) 14.7.0 (Windows) < 14.7.48868 (Windows) 14.7.0 (Linux) < 14.7.48868 (Linux) 14.7.0 (macOS) < 14.7.48868 (macOS) 13.2.0 (Windows) < 13.2.36231 (Windows) 13.2.0 (Linux) < 13.2.154008 (Linux) 13.2.0 (macOS) < 13.2.154007 (macOS)
TeamViewer / Portable
0 < 15.83 15.64.0 (Legacy Windows 7 & 8) < 15.64.10 (Legacy Windows 7 & 8)
TeamViewer / Remote Control
0 < 15.83
References
Credits
Omri Dar