Skip to content
securitytabs

CVE-2026-111585

High8.8

Full Client: Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflowtitle from the CVE record

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

CVSS
8.8v3.1
EPSS (exploit probability)
0.3%21th pct
CISA KEV
Not listed

EPSS trendFIRST daily scores, last 90 days

FIRST EPSS held steady from 0.3% on 2026-10-28 to 0.3% on 2026-10-29, ranging 0.3%–0.3% across 2 daily scores.
2026-10-28 → 2026-10-29 · 2 days · 0.3%–0.3%
Daily values
FIRST EPSS daily scores for this CVE
Score dateEPSSPercentile
2026-10-290.3%21.3%
2026-10-280.3%21.3%

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Learn

Why it happened and what stops it

Coverage1 article

References

Facts sourced from NVD, FIRST EPSS, and CISA KEV. Last synced 2026-10-30 10:21 UTC.

  • CVSS & description: NVD 2.0, fetched 2026-10-30 09:21 UTC
  • EPSS: FIRST EPSS, fetched 2026-10-30 10:21 UTC; score date 2026-10-29
  • KEV: CISA KEV, fetched 2026-10-30 10:21 UTC