CL
Vendor
Clamav
104
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-20243 | CL Clamav Clamav | 7.5 | Jul 1 | ClamAV ALZ Archive Processing Denial of Service Vulnerability |
| CVE-2026-20244 | CL Clamav Clamav | 7.5 | Jul 1 | ClamAV DMG File Processing Denial of Service Vulnerability |
| CVE-2026-20215 | CL Clamav Clamav | 7.5 | Jul 1 | ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability |
| CVE-2026-20217 | CL Clamav Clamav | 7.5 | Jul 1 | ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability |
| CVE-2026-20216 | CL Clamav Clamav | 7.5 | Jul 1 | ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability |
| CVE-2026-20213 | CL Clamav Clamav | 7.5 | Jul 1 | ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability |
| CVE-2026-20214 | CL Clamav Clamav | 7.5 | Jul 1 | ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability |
| CVE-2020-37167 | CL ClamBC ClamAV | 8.4 | Feb 12 | ClamAV ClamBC < 0.103.0-rc - 'ClamBC' Executable Regular Expression Error |
| CVE-2025-20260 | CL Clamav Clamav | 9.8 | Jun 18 | A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS)… |
| CVE-2025-20234 | CL Clamav Clamav | 7.5 | Jun 18 | A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected… |
| CVE-2025-20128 | CL Clamav Clamav | 7.5 | Jan 22 | A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… |
| CVE-2024-20506 | CL Clamav Clamav | 6.1 | Sep 4 | ClamAV Privilege Handling Escalation Vulnerability |
| CVE-2024-20505 | CL Clamav Clamav | 7.5 | Sep 4 | ClamAV Memory Handling DoS |
| CVE-2024-20380 | CL Clamav Clamav | 7.5 | Apr 18 | A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device |
| CVE-2024-20328 | CL Clamav Clamav | 5.3 | Mar 1 | A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The… |
| CVE-2023-20052 | CL Clamav Clamav | 5.3 | Mar 1 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier,… |
| CVE-2023-20032 | CL Clamav Clamav | 9.8 | Mar 1 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and… |
| CVE-2022-20803 | CL Clamav Clamav | 7.5 | Feb 17 | A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service… |
| CVE-2022-20792 | CL Clamav Clamav | 7.8 | Aug 10 | A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior… |
| CVE-2022-20796 | CL Clamav Clamav | 5.5 | May 4 | On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus… |
| CVE-2022-20785 | CL Clamav Clamav | 7.5 | May 4 | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file… |
| CVE-2022-20771 | CL Clamav Clamav | 7.5 | May 4 | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file… |
| CVE-2022-20770 | CL Clamav Clamav | 7.5 | May 4 | On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file… |
| CVE-2022-20698 | CL Clamav Clamav | 7.5 | Jan 14 | A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote… |
| CVE-2021-1405 | CL Clamav Clamav | 7.5 | Apr 8 | A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a… |
| CVE-2021-1404 | CL Clamav Clamav | 7.5 | Apr 8 | A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of… |
| CVE-2021-1252 | CL Clamav Clamav | 7.5 | Apr 8 | A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a… |
| CVE-2021-27506 | CL Clamav Clamav | 5.5 | Mar 19 | The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files |
| CVE-2020-3481 | CL Clamav Clamav | 7.5 | Jul 20 | A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial… |
| CVE-2020-3123 | CL Clamav Clamav | 7.5 | Feb 5 | A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause… |
| CVE-2019-15961 | CL Clamav Clamav | 6.5 | Jan 15 | A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial… |
| CVE-2013-7089 | CL Clamav Clamav | 7.5 | Nov 15 | ClamAV before 0.97.7: dbg_printhex possible information leak |
| CVE-2013-7088 | CL Clamav Clamav | 9.8 | Nov 15 | ClamAV before 0.97.7 has buffer overflow in the libclamav component |
| CVE-2013-7087 | CL Clamav Clamav | 9.8 | Nov 15 | ClamAV before 0.97.7 has WWPack corrupt heap memory |
| CVE-2007-6745 | CL Clamav Clamav | 9.8 | Nov 7 | clamav 0.91.2 suffers from a floating point exception when using ScanOLE2 |
| CVE-2007-0899 | CL Clamav Clamav | 9.8 | Nov 6 | There is a possible heap overflow in libclamav/fsg.c before 0.100.0 |
| CVE-2019-1789 | CL Clamav Clamav | 7.5 | Nov 5 | ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability |
| CVE-2019-12625 | CL Clamav Clamav | 7.5 | Nov 5 | ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages… |
| CVE-2019-1798 | CL Clamav Clamav | 5.5 | Apr 8 | A vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote… |
| CVE-2019-1788 | CL Clamav Clamav | 5.5 | Apr 8 | A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated,… |
| CVE-2019-1787 | CL Clamav Clamav | 5.5 | Apr 8 | A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote… |
| CVE-2019-1786 | CL Clamav Clamav | 5.5 | Apr 8 | A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated,… |
| CVE-2019-1785 | CL Clamav Clamav | 7.8 | Apr 8 | A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a… |
| CVE-2018-15378 | CL Clamav Clamav | 5.5 | Oct 15 | A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition |
| CVE-2018-0361 | CL Clamav Clamav | 3.3 | Jul 16 | ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file |
| CVE-2018-0360 | CL Clamav Clamav | 5.5 | Jul 16 | ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file |
| CVE-2018-0202 | CL Clamav Clamav | 5.5 | Mar 27 | clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device |
| CVE-2018-1000085 | CL Clamav Clamav | 5.5 | Mar 13 | ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Leaking of memory, may help in… |
| CVE-2017-12380 | CL Clamav Clamav | 7.5 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… |
| CVE-2017-12379 | CL Clamav Clamav | 9.8 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or… |
| CVE-2017-12378 | CL Clamav Clamav | 5.5 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… |
| CVE-2017-12377 | CL Clamav Clamav | 9.8 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or… |
| CVE-2017-12376 | CL Clamav Clamav | 7.8 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or… |
| CVE-2017-12375 | CL Clamav Clamav | 7.5 | Jan 26 | The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… |
| CVE-2017-12374 | CL Clamav Clamav | 7.5 | Jan 26 | The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition… |
| CVE-2017-6420 | CL Clamav Clamav | 5.5 | Aug 7 | The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression |
| CVE-2017-6418 | CL Clamav Clamav | 5.5 | Aug 7 | libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message |
| CVE-2016-1372 | CL Clamav Clamav | 5.5 | Oct 3 | ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file |
| CVE-2016-1371 | CL Clamav Clamav | 5.5 | Oct 3 | ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable |
| CVE-2016-1405 | CL Clamav Clamav | 7.5 | Jun 8 | libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance… |