TeamViewer fixes flaw allowing controlled computers to attack connecting users

TeamViewer version 15.83 fixes a high-severity flaw that lets a malicious controlled computer attack the computer connecting to it, The Hacker News reported. CVE-2026-111585 affects earlier Full Client versions on Windows, Linux and macOS, Windows Portable editions and the Android Remote Control app. A screen-size calculation can allocate too little memory, allowing incoming screen data to overflow it. Remedio demonstrated code execution on Windows using a stand-in to supply some attack data; the demonstration was not entirely network-based. TeamViewer said it knew of no exploitation when publishing the fix.