Security1 hOctober 30, 2026, 15:44

TeamViewer flaw lets malicious hosts hijack support technicians' machines

CVE-2026-111585 (CVSS 8.8) in TeamViewer clients for Windows, macOS, Linux and Android lets a malicious host overflow the screen buffer and execute code on a viewer's system. The fix ships in version 15.83, which also patches CVE-2026-92372, CVE-2026-92374 and six privilege-escalation flaws.

SecurityWeek

Open source

CVE-2026-111585 rated 8.8 is an integer overflow in screen processing
A host can declare a 32768×32768 surface and write out of bounds
Patched in TeamViewer 15.83 for Full Client, Host, Portable and Android app
No exploitation in the wild has been observed, the company says

#TeamViewer

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Security

Malicious AGENTS.md and CLAUDE.md files hijack AI coding agents

Security

BragJack attacks hijack AI browser agents through malicious extensions

Security

TeamViewer flaw lets malicious hosts hijack support technicians' machines

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Malicious AGENTS.md and CLAUDE.md files hijack AI coding agents

BragJack attacks hijack AI browser agents through malicious extensions

Carbonato botnet uses AI agent to hijack exposed Docker hosts