Quick answers
- Is CVE-2026-111585 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-111585 being exploited in the wild.
- How severe is CVE-2026-111585?
- High severity, with a CVSS score of 8.8, published 27 October 2026.
- Which products and versions are affected?
- Teamviewer Full Client Prior to 15.83 (Windows, Linux, macOS); legacy versions 15.64, 14.7, 13.2; Teamviewer Portable Prior to 15.83 (Windows); Teamviewer Remote Control App Prior to 15.83 (Android).
- Is there a fix for CVE-2026-111585?
- Yes: fixed in 15.83 (Full Client, Portable, Remote Control App). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-111585 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-111585?
- Check whether you run Teamviewer Full Client, Teamviewer Portable or Teamviewer Remote Control App at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
How to fix
- Fixed in: 15.83 (Full Client, Portable, Remote Control App)
Technical details
An integer overflow in the remote-control screen decompression component of TeamViewer clients (CVE-2026-111585) can lead to heap-based buffer overflow, triggered when a malicious remote host supplies crafted screen-image data. The attack requires network access and user interaction to establish a remote-control session. Successful exploitation may cause denial of service or arbitrary code execution with viewer process privileges.
Affected products
- TeamViewer Full Client Prior to 15.83 (Windows, Linux, macOS); legacy versions 15.64, 14.7, 13.2
- TeamViewer Portable Prior to 15.83 (Windows)
- TeamViewer Remote Control App Prior to 15.83 (Android)
Timeline
- 2026-10-27: disclosed: Security bulletin TV-2026-1011 published