Team Viewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

Summary: TeamViewer fixed a flaw, tracked as CVE-2026-111585 and scored 8.8 out of 10, in which the machine being controlled in a remote session can crash the viewer's TeamViewer and, on Windows, may run code on the viewer's computer. The bug affects the Full Client on Windows, Linux, and macOS, the Windows Portable edition, and the Android Remote Control app in all versions before 15.83, and researcher Omri Dar of Remedio published a technical account on October 29 describing a screen-size calculation that overflows and lets later screen data be written past the end of the reserved space.
Bottom line: The attack needs no password and no click beyond accepting the session, and it works in TeamViewer's default setup, so the trust direction of remote support is reversed: the party you connect to control is the one that can attack you. Updating to 15.82 in September did not remove it, and TeamViewer lists no workaround other than moving to 15.83 or later.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-111585
Related: ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026