Priority HIGH 66
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earl…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.30061 · Published 2023-02-16 · No fix listed CWE-120
Priority MEDIUM 64
A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.33323 · Published 2024-02-07 · No fix listed CWE-126
Priority MEDIUM 53
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.1…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.07074 · Published 2022-05-04 · No fix listed CWE-399
Priority MEDIUM 49
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07117 · Published 2022-05-04 · No fix listed CWE-401
Priority MEDIUM 48
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) version…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05882 · Published 2022-05-04 · No fix listed CWE-399
Priority MEDIUM 40
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected dev…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00719 · Published 2026-08-07 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected dev…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-770
Priority MEDIUM 40
A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00816 · Published 2025-06-18 · No fix listed CWE-125
Priority LOW 39
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03441 · Published 2023-08-18 · No fix listed CWE-825
Priority LOW 36
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01815 · Published 2025-01-22 · No fix listed CWE-122
Priority LOW 35
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01171 · Published 2023-08-16 · No fix listed CWE-835
Priority LOW 34
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could a…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.07003 · Published 2023-02-16 · No fix listed CWE-611
Priority LOW 29
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00388 · Published 2022-05-04 · No fix listed CWE-822
Priority LOW 22
A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window.
CVSS 3.1MEDIUM 5.0· Local · Low privileges · User interaction · EPSS 0.00172 · Published 2023-11-22 · No fix listed CWE-437