TeamViewer Patches High-Severity Flaws Exposing Support Clients to Code Execution

TeamViewer released version 15.83 and fixes for specified legacy releases to address three high-severity vulnerabilities: CVE-2026-92372, CVE-2026-92374, and CVE-2026-111585. A November 5 gmCSIRT advisory warned that the flaws could enable remote code execution or local privilege escalation, with denial of service also identified as a potential impact. Affected products span Windows, Linux, macOS, and Android, although the privilege-escalation flaw affects only the three desktop platforms. No known exploitation of the vulnerabilities was reported at the time of the advisory.

The remote-screen processing flaw CVE-2026-111585, rated CVSS 8.8, allows an attacker-controlled or compromised remote host to send crafted screen dimensions to a connecting technician’s viewer, triggering an integer overflow that could cause a crash or execute code with the viewer’s privileges. Exploitation requires a remote session but no password or additional action beyond accepting it, making support teams and managed service providers particularly exposed. Organizations should update affected clients to version 15.83 or the applicable fixed legacy build, verify deployment across internal and third-party support environments, restrict remote connections, enforce least privilege, and monitor endpoints for suspicious activity.