TeamViewer fixed CVE-2026-111585, a high-severity flaw where a remote host could attack a viewer machine during screen size communication.
Version 15.83 patches the issue.
How role reversal works
In a normal remote connection, the person helping connects to another computer. According to research by security firm Remedio and TeamViewer's announcements, there was a problem in the way the devices exchange information.
When the computer being controlled sent information about its screen size, the computer making the connection stored this data in its memory. If this data was too large, an overflow problem occurred. This resulted in the application closing abruptly, and in some cases it could allow commands to be executed on the computer providing the assistance.
Who is at risk and what the tests showed
The issue affects the full version of the application on Windows, Linux, macOS, the special portable version for Windows, as well as the remote control application for Android, in all versions before 15.83. The Remedio research team managed to bypass the computer's protection systems and run code using a specially prepared computer on the other end in tests on Windows.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
Drupal warns of attacks on e-commerce plugin
↗
TeamViewer said that the ability to execute code is operating system dependent. The attack did not require a password or any additional clicks from the user beyond accepting the connection in the default settings.
What does the data show so far?
When the company released the fix on October 29, 2026, there was no indication that the problem had been used in actual attacks.
TeamViewer has released version 15.83 which fixes the issue. Since there is no other way to temporarily protect yourself, users are advised to update their application to the latest version.
G
HACKS.GR / GOOGLE SEARCH
Hacks.gr on Google
Set Hacks.gr as a preferred source.
Preferred source
↗
end of article
Top comments (0)