CVE-2026-111585：TeamViewer 遠端控制畫面解壓縮時整數溢位導致堆疊緩衝區溢位
CVE-2026-111585 - Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
TeamViewer 之前版本 15.83 之前的客戶端存在整數溢位漏洞，攻擊者可透過遠端控制畫面解壓縮觸發堆疊緩衝區溢位，造成拒絕服務或執行任意程式。
此漏洞揭示遠端控制協定的緩衝區安全風險，提醒使用者及時升級以防止拒絕服務或任意執行，並確保遠端會話僅連線可信主機。
An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.
Impact
Affected Products
The following products are affected by CVE-2026-111585
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | 13430f76-86eb-43b2-a71c-82c956ef31b6 |
Update TeamViewer to version 15.83 or later to fix denial of service and code execution flaws.
- Update TeamViewer to version 15.83 or later.
- Ensure remote control sessions are established to trusted hosts.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-111585 vulnerability anywhere in the article.
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.