The National Cyber Emergency Response Team (National CERT) has urged TeamViewer users to update the remote-access app after a high-severity flaw was found that could let attackers crash it or run malicious code on a computer.
The flaw, tracked as CVE-2026-111585, has a CVSS score of 8.8. It affects TeamViewer clients older than version 15.83 on Windows, macOS, and Linux, according to the advisory, which cites TeamViewer’s own security bulletin.
How the Attack Works
The bug is an integer overflow in the part of TeamViewer that processes remote screen data. A malicious or hacked remote computer can send data that triggers it, causing a crash or memory corruption.
Depending on the platform, this could allow an attacker to run code with the same privileges as the TeamViewer app. However, the attack is not automatic. It only works when a user connects to a computer controlled by the attacker.
Which Versions Are Affected
The advisory lists the TeamViewer Full Client for Windows, macOS, and Linux, TeamViewer Portable for Windows, and the Android Remote Control app. Users should move to version 15.83 or later. Older branches have separate fixes, including 14.7.48868 for 14.x and 13.2.36231 for 13.x.
What Users Should Do
National CERT, which recently warned staff about another security risk, advised users and organizations to:
- Update all TeamViewer installations, including portable and older versions
- Accept remote sessions only from verified, trusted people
- Limit remote access to approved users and devices
- Review unattended access and admin privileges
- Watch for unexpected TeamViewer crashes or unusual sessions
Where patching is not immediately possible, the advisory suggests blocking untrusted remote connections. If a device may be compromised, organizations should preserve logs, restrict remote access, and seek incident-response help.
The post National CERT Warns TeamViewer Users to Update Now Over Serious Flaw appeared first on ProPakistani.
