{"id":"CVE-2026-111585","aliases":["EUVD-2026-111081","GHSA-jfxf-g3r2-4998"],"status":"published","title":"Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow","description":"An integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full Client, Portable and Remote\nControl App) prior to version 15.83 may allow a malicious remote host to cause\na denial of service or, depending on the platform, potentially execute\narbitrary code with the privileges of the viewer process. Exploitation requires\na user to establish a remote-control session to an attacker-controlled or\ncompromised host.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00288,"percentile":0.21595,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-190"],"published":"2026-10-27T15:19:40Z","modified":"2026-11-04T20:27:33Z","exploits":[{"source":"pocgithub","id":"googlesky/CVE-2026-111585","title":"googlesky/CVE-2026-111585","date":"2026-10-31","url":"https://github.com/googlesky/CVE-2026-111585"}],"products":[{"vendor":"teamviewer","product":"full client"},{"vendor":"teamviewer","product":"portable"},{"vendor":"teamviewer","product":"remote control"}],"references":[{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011/","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111585"},{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1011"},{"url":"https://github.com/advisories/GHSA-jfxf-g3r2-4998"}],"sources":{"cve":[{"id":"CVE-2026-111585","title":"Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow","description":"An integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full Client, Portable and Remote\nControl App) prior to version 15.83 may allow a malicious remote host to cause\na denial of service or, depending on the platform, potentially execute\narbitrary code with the privileges of the viewer process. Exploitation requires\na user to establish a remote-control session to an attacker-controlled or\ncompromised host.","status":"published","published":"2026-10-27T15:19:40.571Z","modified":"2026-11-04T20:27:33.505Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-04T21:42:21.553972Z"}],"euvd":[{"id":"EUVD-2026-111081","description":"An integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full Client, Portable and Remote\nControl App) prior to version 15.83 may allow a malicious remote host to cause\na denial of service or, depending on the platform, potentially execute\narbitrary code with the privileges of the viewer process. Exploitation requires\na user to establish a remote-control session to an attacker-controlled or\ncompromised host.","status":"published","published":"2026-10-27T15:19:40Z","modified":"2026-11-04T20:27:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T21:45:43.843698Z"}],"ghsa":[{"id":"GHSA-jfxf-g3r2-4998","title":"An integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full...","description":"An integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full Client, Portable and Remote\nControl App) prior to version 15.83 may allow a malicious remote host to cause\na denial of service or, depending on the platform, potentially execute\narbitrary code with the privileges of the viewer process. Exploitation requires\na user to establish a remote-control session to an attacker-controlled or\ncompromised host.","status":"published","published":"2026-10-27T18:31:33Z","modified":"2026-10-27T18:31:34Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:14:30.115077Z"}],"nvd":[{"id":"CVE-2026-111585","description":"An integer overflow in the remote-control\nscreen processing component of TeamViewer clients (Full Client, Portable and Remote\nControl App) prior to version 15.83 may allow a malicious remote host to cause\na denial of service or, depending on the platform, potentially execute\narbitrary code with the privileges of the viewer process. Exploitation requires\na user to establish a remote-control session to an attacker-controlled or\ncompromised host.","status":"published","published":"2026-10-27T16:17:29.87Z","modified":"2026-11-04T21:17:49.477Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-04T23:43:42.179273Z"}]}}