Pakistan’s National CERT has urged TeamViewer users and organisations across Pakistan to update to version 15.83 or later, after a high-severity flaw was found in older versions of the remote-access software. The advisory, issued as NCA-25.311026 and reported on November 1, 2026, warns that a computer at the other end of a remote session could attack the machine connecting to it.
What happened?
Pakistan’s national cyber emergency response team, National CERT, has told users of TeamViewer for remote access, technical support or system administration to move to version 15.83 or later. The flaw, tracked as CVE-2026-111585 and rated 8.8 out of 10 for severity, sits in the part of the viewer that handles the remote screen. A hostile or already compromised host computer can send data that crashes TeamViewer or corrupts its memory, and on some platforms that could allow code to run with the same rights as the TeamViewer process. TeamViewer fixed the flaw in version 15.83, released in late October 2026, and said at the time of its bulletin that it knew of no exploitation in the wild. An attack is not automatic: it needs a user to start a remote-control session with a host controlled by an attacker.
Key details
- Update to version 15.83 or later on Windows, macOS and Linux; the Android Remote Control app should be updated to version 15.8.3 or later.
- Older 14.x and 13.x installations have their own fixed builds, including 14.7.48868 and, on Windows, 13.2.36231; users on legacy branches should check TeamViewer’s bulletin for the correct version.
- The affected apps are the standard desktop client on Windows, macOS and Linux, the portable Windows build and the Android remote control app.
- National CERT also advises limiting remote sessions to approved users, trusted partners and authorised devices, confirming who is on the other end before accepting a session, and reviewing unattended access and its permissions.
- Where an update cannot be installed straight away, the advisory suggests blocking untrusted outbound remote connections and checking logs for unexpected TeamViewer crashes or sessions nobody can account for.
- TeamViewer’s bulletin TV-2026-1011 bundles two further fixes in version 15.83: CVE-2026-92372, an out-of-bounds write in the screen-image decoder on Linux and macOS, and CVE-2026-92374, affecting the privileged helper on macOS.
What it means for people in Pakistan
For anyone who uses TeamViewer to get help with a computer, support family members remotely or manage office systems, the fix is straightforward: update the app and check the version under Help, then About TeamViewer. Support staff and IT teams who regularly connect to outside machines face the greatest exposure, so updating promptly and limiting sessions to trusted contacts are the simplest ways to stay protected.
Source: https://techprolonged.com/2026/11/update-teamviewer-to-15-83-pakistans-national-cert-warns/
