Usually we worry about the tech connecting to our machine. This TeamViewer bug flips it: a malicious host could attack the viewer that connects to it.
The details
CVE-2026-111585 (CVSS 8.8) is an integer overflow in how the viewer sizes memory for the host’s screen image. At minimum it crashes the viewer’s TeamViewer. Researcher Omri Dar at Remedio got code execution on Windows. It affects the Full Client on Windows, Linux and macOS, the Windows Portable edition and the Android Remote Control app, in all versions before 15.83. September’s 15.82 update doesn’t fix it.
Remedio reported no attacks in the wild and didn’t release exploit code.
What to do
Update to 15.83. There’s no workaround. Host installs should update too, because 15.83 fixes two other flaws that hit the Host.
If you help family or friends with their PCs, this is the one to patch before the holidays.
God Bless, and Happy hacking!
