Ethical Hacking News
TeamViewer has issued a patch to fix a critical vulnerability that allows malicious actors to launch attacks against users who connect to control their computers. The vulnerability, tracked as CVE-2026-111585, has been rated 8.8 out of 10 and affects all versions of the software before 15.83. Users are advised to update to the latest version to ensure they are protected against this vulnerability.
A recent vulnerability in TeamViewer has been discovered, allowing malicious actors to exploit the system and launch attacks against users.The vulnerability, CVE-2026-111585, has a high severity rating of 8.8 out of 10.The attack requires no password and no extra click beyond accepting the session, making it a highly sophisticated and stealthy attack vector.The vulnerability can be exploited by manipulating the screen size calculation, causing a crash of the viewer's TeamViewer session.TeamViewer has released a patch for the vulnerability, which is now available in version 15.83.Users are recommended to update to version 15.83 or later to ensure they are protected against this vulnerability.The discovery highlights the importance of keeping software up to date and the need for robust security measures to protect against sophisticated attacks.
A recent vulnerability in TeamViewer, a popular remote access software, has been discovered, allowing malicious actors to exploit the system and launch attacks against users who connect to control their computers. The vulnerability, tracked as CVE-2026-111585, has been rated 8.8 out of 10, indicating a high level of severity.
According to a technical account published by Omri Dar, a researcher at security firm Remedio, the vulnerability occurs when a user starts a remote-control session to a compromised host. The host, which is the machine being controlled, can exploit the flaw to crash the viewer's TeamViewer session and, depending on the platform, run code on the viewer's computer. This attack requires no password and no extra click beyond accepting the session, making it a highly sophisticated and stealthy attack vector.
The attack works by manipulating the screen size calculation, causing the viewer to reserve too little memory. The screen data that arrives afterward is then written past the end of that space, leading to a crash of the viewer's TeamViewer session. The attacker can then trigger the crash again, allowing them to launch further attacks.
Researchers at Remedio demonstrated the vulnerability on Windows, bypassing the operating system's built-in exploit defenses and running code of their choosing in the viewer. However, it is unclear whether the same works on macOS, Linux, or Android.
TeamViewer has released a patch for the vulnerability, which is now available in version 15.83. The company has also fixed two other high-severity flaws in the same bulletin, including a separate code-execution flaw affecting Linux and macOS.
The fix is available for all supported branches, and TeamViewer recommends that users update to version 15.83 or later to ensure they are protected against this vulnerability. Unfortunately, updating last month did not remove the vulnerability, indicating that the patch is not yet widely available.
The discovery of this vulnerability highlights the importance of keeping software up to date and the need for robust security measures to protect against sophisticated attacks. It also serves as a reminder that even seemingly secure software can have hidden vulnerabilities waiting to be exploited.
In related news, this vulnerability is the latest in a series of high-profile security breaches and exploits that have been making headlines in recent weeks. Other notable vulnerabilities include the Broadcom Wi-Fi flaw, the OpenCode Console breach, and the PHP2Shell vulnerability, which have all had significant impacts on the security landscape.
As the threat landscape continues to evolve, it is essential for individuals and organizations to stay vigilant and take proactive steps to protect themselves against emerging threats. By staying informed and up to date with the latest security patches and best practices, individuals can significantly reduce their risk of falling victim to attacks like the one described in this article.
Related Information:
https://www.ethicalhackingnews.com/articles/TeamViewer-Flaw-Exposed-A-Critical-Vulnerability-Allows-Remote-Computers-to-Attack-Users-Who-Connect-to-Control-Them-ehn.shtml
https://thehackernews.com/2026/10/teamviewer-flaw-lets-remote-computers.html
https://nvd.nist.gov/vuln/detail/CVE-2026-111585
https://www.cvedetails.com/cve/CVE-2026-111585/
Published: Fri Oct 30 12:23:59 2026 by llama3.2 3B Q4_K_M
