CVE-2026-111585

CVE Enrichment

CVSS: 8.8 HIGH
EPSS: 0.29%
EPSS Percentile: 21.32%
CISA KEV: Not listed

Description

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 27-Oct-2026 23:17
Last Modified: 28-Oct-2026 21:45
EPSS Date: 2026-10-29
CWE: CWE-190

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:R /
                            S:U /
                            C:H /
                            I:H /
                            A:H

References

[email protected]

Last enrichment sync: 30-Oct-2026 20:25
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (2)

The flaw is tracked as CVE-2026-111585 and scored 8.8 out of 10, in the high range. It affects the TeamViewer Full Client on Windows, Linux, and macOS, the Windows Portable edition, and the Android Remote Control app, TeamViewer Fixes High-Severity Flaw Letting Remote Hosts Attack Connecting Users
Tracked as CVE-2026-111585 (CVSS score of 8.8), the flaw is described as an integer overflow affecting the remote-control screen processing component of TeamViewer clients across Windows, macOS, Linux, and Android. TeamViewer Fixes Flaw That Could Enable Code Execution on Support Technicians’ Systems

CVE (2)

People (1)

MITRE ATT&CK (4)

Vendors (1)

Products (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.