PT-2026-126620
CVE-2026-111585
·
تاريخ النشر
2026-10-27
·
تاريخ التحديث
2026-10-30
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
#NØØT Security Alerts
🚨 #ALERT — TeamViewer Remote Screen Processing May Execute Attacker Code
October 27, 2026
PRODUCT: TeamViewer Remote/Tensor/ONE clients.
CVE: CVE-2026-111585.
SEVERITY: HIGH — CVSS 8.8.
AFFECTED: Full Client/Portable earlier than 15.83 on Windows, Linux and macOS; Android Remote Control earlier than 15.83; certain maintained legacy branches.
IMPACT: An integer overflow in screen-data decompression can cause denial of service or potentially arbitrary code execution with viewer-process privileges.
PREREQUISITE: A technician must establish a remote-control session to an attacker-controlled or already-compromised host. This is not unauthenticated exploitation of a passive endpoint.
EXPLOITATION STATUS: TeamViewer reports no known exploitation in the wild (bulletin updated October 28).
FORENSIC TRIAGE: Inventory technician consoles and inspect suspicious remote-session events.
URGENT ACTION: Update clients to 15.83+ or vendor-supported branch fixes; avoid connecting outdated consoles to untrusted hosts.
SOURCE: https://t.co/XEX0URyBL3
CONFIDENCE: HIGH — TeamViewer’s first-party technical bulletin.
#TeamViewer #RCE #RemoteSupport #CVE #CyberSecurity
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾