TeamViewer: code exec via integer overflow

TeamViewer Full Client

An integer overflow flaw in TeamViewer could allow malicious hosts to execute arbitrary code on the viewer's system.

Do this now

Upgrade TeamViewer Full Client to 15.83, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868 (Linux), +4 more lines in Fix it.

Fix it

Full Client

On 13.2.xUpgrade to Full Client 13.2.36231 (Windows)
On 14.7.xUpgrade to Full Client 14.7.48868 (Linux)
On 15.64.xUpgrade to Full Client 15.64.10 (Legacy Windows 7 & 8)
On 15.83.xUpgrade to Full Client 15.83

Portable

On 15.64.xUpgrade to Portable 15.64.10 (Legacy Windows 7 & 8)
On 15.83.xUpgrade to Portable 15.83

Remote Control

Upgrade to Remote Control 15.83

First seen: 30 Oct 2026
Last update: 30 Oct 2026, 09:18 UTC
Fixed in: Full Client 15.83
Full Client 15.64.10 (Legacy Windows 7 & 8)
Full Client 14.7.48868 (Linux)
Full Client 13.2.36231 (Windows)
Portable 15.83
Portable 15.64.10 (Legacy Windows 7 & 8)
Remote Control 15.83
Identifiers: CVE-2026-111585
CVSS: 8.8
Source: news
On the menu as: Remote access

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## TeamViewer: code exec via integer overflow
Severity: high. Patch status: patched.
Affected: TeamViewer Full Client
Fixed in: Full Client 15.83, Full Client 15.64.10 (Legacy Windows 7 & 8), Full Client 14.7.48868 (Linux), Full Client 13.2.36231 (Windows), Portable 15.83, Portable 15.64.10 (Legacy Windows 7 & 8), Remote Control 15.83
Ids: CVE-2026-111585

An integer overflow flaw in TeamViewer could allow malicious hosts to execute arbitrary code on the viewer's system.

## Steps
1. This touches infrastructure (remote-support). Look in terraform, ansible, cloud-init, Dockerfiles and docs for the product and version we run. If it isn't in the repo, say so and list what a human should check on the box.
2. Fix by release line: Full Client: 15.83; 15.64.x → 15.64.10 (Legacy Windows 7 & 8); 14.7.x → 14.7.48868 (Linux); 13.2.x → 13.2.36231 (Windows). Portable: 15.83; 15.64.x → 15.64.10 (Legacy Windows 7 & 8). Remote Control: 15.83.

## Fix by release line
| Line | State | Fix | Until then |
|---|---|---|---|
| Full Client | fixed | 15.83 | — |
| Full Client 15.64.x | fixed | 15.64.10 (Legacy Windows 7 & 8) | — |
| Full Client 14.7.x | fixed | 14.7.48868 (Linux) | — |
| Full Client 13.2.x | fixed | 13.2.36231 (Windows) | — |
| Portable | fixed | 15.83 | — |
| Portable 15.64.x | fixed | 15.64.10 (Legacy Windows 7 & 8) | — |
| Remote Control | fixed | 15.83 | — |

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2026-111585") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://www.securityweek.com/teamviewer-flaw-could-let-malicious-hosts-take-over-support-technicians-machines/
https://pwned.coffee/i/teamviewer-code-exec-via-integer-overflow-cve-2026-111585

Timeline

30 Oct 2026, 09:18 UTC
Fix status: no fix yet → patched.
30 Oct 2026
First reported.

Receipt

Exploitation: No known exploitation
Fix by release line: Product Affected Fixed in Source
Full Client before 15.83 15.83 CVE record (CNA) checked 30 Oct
Full Client 15.64.0 (Legacy Windows 7 & 8) to before 15.64.10 (Legacy Windows 7 & 8) 15.64.10 (Legacy Windows 7 & 8) CVE record (CNA) checked 30 Oct
Full Client 14.7.0 (Windows) to before 14.7.48868 (Linux) 14.7.48868 (Linux) CVE record (CNA) checked 30 Oct
Full Client 13.2.0 (Windows) to before 13.2.36231 (Windows) 13.2.36231 (Windows) CVE record (CNA) checked 30 Oct
Portable before 15.83 15.83 CVE record (CNA) checked 30 Oct
Portable 15.64.0 (Legacy Windows 7 & 8) to before 15.64.10 (Legacy Windows 7 & 8) 15.64.10 (Legacy Windows 7 & 8) CVE record (CNA) checked 30 Oct
Remote Control before 15.83 15.83 CVE record (CNA) checked 30 Oct
Score: CVSS 8.8 (high). CVSS 3.1 8.8 (CNA TV) for CVE-2026-111585
Last checked: 30 Oct 2026, 10:54 UTC

Product	Affected	Fixed in	Source
Full Client	before 15.83	15.83	CVE record (CNA) checked 30 Oct
Full Client	15.64.0 (Legacy Windows 7 & 8) to before 15.64.10 (Legacy Windows 7 & 8)	15.64.10 (Legacy Windows 7 & 8)	CVE record (CNA) checked 30 Oct
Full Client	14.7.0 (Windows) to before 14.7.48868 (Linux)	14.7.48868 (Linux)	CVE record (CNA) checked 30 Oct
Full Client	13.2.0 (Windows) to before 13.2.36231 (Windows)	13.2.36231 (Windows)	CVE record (CNA) checked 30 Oct
Portable	before 15.83	15.83	CVE record (CNA) checked 30 Oct
Portable	15.64.0 (Legacy Windows 7 & 8) to before 15.64.10 (Legacy Windows 7 & 8)	15.64.10 (Legacy Windows 7 & 8)	CVE record (CNA) checked 30 Oct
Remote Control	before 15.83	15.83	CVE record (CNA) checked 30 Oct

Sources: KEV – CVE record ✓ Vendor ✓

Sources

securityweek.com: TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines

Wrong fix version, or a source we missed? Send it back to chef@pwned.coffee with the source, and we'll correct it here.

Totalone hot coffee