CVE-2026-111585: TeamViewer Full Client (High, CVSS 8.8)
- CVSS
- 8.8 High (v3.1)
- EPSS
- 0.3% chance of exploitation in the next 30 days (higher than 21.3% of CVEs)
- Exploited in the wild
- Not on CISA’s KEV list
- Public exploit
- None reported in public exploit databases
- Weakness
- CWE-190
- Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H- Published
- Oct 27, 2026
What it is
An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.
Description from the National Vulnerability Database.
What to do
Check whether you run TeamViewer Full Client, then apply the vendor’s fix or mitigation from the advisories below.
ThreatRoundup coverage
Connect to the Wrong PC, Get Hacked: TeamViewer Fixes a Reverse Attack
Sources: NVD, FIRST EPSS, CISA KEV, and public exploit databases (availability only). ThreatRoundup reports whether public exploit code exists but never links to it: fake proof-of-concepts that infect security researchers are common. This page updates automatically.