TeamViewer flaw could let remote hosts take over client PCs

A security alert published by Do Son of SecurityOnline[.]info on 3 November 2026 describes a TeamViewer client vulnerability that enables remote code execution. The flaw is reported to allow a compromised remote endpoint to send weaponised display metadata to the connecting client, potentially causing the administrator’s TeamViewer session to terminate or the operator’s workstation to be taken over. The issue is formally tracked as CVE-2026-111585 and is rated 8.8 on the CVSS scale (CVSSv3).

SecurityOnline[.]info notes TeamViewer has urged subscribers to upgrade to version 15.83, with patches also listed for legacy platforms across several builds and operating systems.

The article explains the technical vector as an integer overflow within the display frame decompression pipeline of the TeamViewer Full Client. After initial authentication, a remote host reports screen dimensions, and the client calculates the memory footprint to render updates; malicious input allegedly distorts these dimensions during negotiation, triggering a memory overflow that can lead to out-of-bounds writes and arbitrary code execution within client privileges.

The piece cites a technical disclosure and forensic evaluations in which researchers reportedly demonstrated arbitrary binaries running on target administrative machines. TeamViewer’s statement, the article says, confirms the vulnerability may cause denial of service or arbitrary execution under the client’s privileges.

Impacted releases and deployment guidance are itemised: Windows, Linux, and macOS Full Client installations prior to 15.83; portable Windows editions prior to 15.83; Android Remote Control apps prior to 15.83; and legacy maintenance branches. The article lists patched versions including 15.83, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868 (Windows and Linux), among others, and urges prompt remediation to neutralise reverse intrusion pathways. The status is recorded as no confirmed exploitation at the time of reporting.