CVE-2026-111585
Received
Received - Intake
Integer Overflow in TeamViewer Remote Control
Vulnerability report for CVE-2026-111585, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-27
Last updated on: 2026-10-27
Assigner: TeamViewer Germany GmbH
Description
Description
An integer overflow in the remote-control
screen processing component of TeamViewer clients (Full Client, Portable and Remote
Control App) prior to version 15.83 may allow a malicious remote host to cause
a denial of service or, depending on the platform, potentially execute
arbitrary code with the privileges of the viewer process. Exploitation requires
a user to establish a remote-control session to an attacker-controlled or
compromised host.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| TeamViewer | Full Client | 0 |
| TeamViewer | Full Client | 15.64.0 (Legacy Windows 7 & 8) |
| TeamViewer | Full Client | 14.7.0 (Windows) |
| TeamViewer | Full Client | 14.7.0 (Linux) |
| TeamViewer | Full Client | 14.7.0 (macOS) |
| TeamViewer | Full Client | 13.2.0 (Windows) |
| TeamViewer | Full Client | 13.2.0 (Linux) |
| TeamViewer | Full Client | 13.2.0 (macOS) |
| TeamViewer | Portable | 0 |
| TeamViewer | Portable | 15.64.0 (Legacy Windows 7 & 8) |
| TeamViewer | Remote Control | 0 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-190 | The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number. |
