TeamViewer has released a crucial update addressing a significant security flaw that could allow a remote host to compromise a controlling computer. This vulnerability, identified as CVE-2026-111585, has been patched in version 15.83 of TeamViewer.
Vulnerability Details
The flaw allowed the host in a remote session to crash the controlling computer’s TeamViewer application, and potentially execute arbitrary code. This vulnerability affected the TeamViewer Full Client on Windows, Linux, macOS, the Windows Portable edition, and the Android Remote Control app. Users operating any versions prior to 15.83 are at risk.
Security researcher Omri Dar from Remedio provided a detailed analysis of the flaw, highlighting how the host could manipulate screen size calculations to reserve inadequate memory on the viewer’s system. This oversight could lead to memory overflow, causing application crashes and opening a door for potential code execution.
Platform-Specific Risks
While the most severe implications of this flaw have been demonstrated on Windows systems, the potential for similar exploits on macOS, Linux, or Android remains unclear. TeamViewer has indicated that code execution may vary depending on the platform, emphasizing the importance of updating to the latest software version.
Importantly, initiating an attack required no additional authentication steps beyond the initial session acceptance, making this flaw especially concerning for users with default settings.
Update and Precautionary Measures
To mitigate the risks associated with this vulnerability, TeamViewer users are strongly advised to upgrade to version 15.83 or later. The update not only addresses this specific flaw but also resolves two other high-severity issues affecting the host functionality. Furthermore, a separate bulletin (TV-2026-1012) issued the same day details additional fixes for remote management components.
As of the latest updates, no known exploits of this vulnerability have been reported, and it is not listed in the CISA’s Known Exploited Vulnerabilities catalog. However, users should remain vigilant and ensure their software is up-to-date to maintain security integrity.
In conclusion, while no current attacks have been detected, the potential severity of this vulnerability underscores the importance of regular software updates. Staying informed and proactive about cybersecurity is crucial in navigating today’s digital landscape.
