A high-severity vulnerability in TeamViewer, tracked as CVE-2026-111585 with a CVSS score of 8.8, could allow attackers to execute arbitrary code on the viewer’s system.
The vulnerability or weakness
The flaw, an integer overflow in the remote-control screen processing component, can be exploited by attackers who negotiate video codecs that force the viewer to allocate an oversized in-memory pixel buffer.
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-111585 | 8.8 | HIGH | No | - |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers (2026-10-28)
- Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens (2026-10-27)
- OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections (2026-10-27)
- Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes (2026-10-26)
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers (2026-10-25)
Business impact
Organizations could face significant operational disruptions and potential data loss, leading to increased costs and reputational damage.
Industries affected
IT support, customer service, and remote work sectors are primarily affected.
Users affected
Support technicians and their clients using TeamViewer are at risk, as attackers can take control of their systems and potentially execute malicious code.
