Priority MEDIUM 40
A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected dev…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-770
Priority MEDIUM 40
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority MEDIUM 40
A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-07-01 · No fix listed CWE-120
Priority HIGH 78
ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode function names.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.00191 · Published 2026-02-12 · Fixed in 0.103.0-rc
Priority MEDIUM 52
A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an aff…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01643 · Published 2025-06-18 · No fix listed CWE-122
Priority MEDIUM 40
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00816 · Published 2025-06-18 · No fix listed CWE-125
Priority LOW 36
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01815 · Published 2025-01-22 · No fix listed CWE-122
Priority LOW 27
A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and…
CVSS 3.1MEDIUM 6.1· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2024-09-04 · No fix listed CWE-754
Priority LOW 34
A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and al…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00555 · Published 2024-09-04 · No fix listed CWE-125
Priority MEDIUM 41
A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01101 · Published 2024-04-18 · No fix listed CWE-475
Priority HIGH 67
A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file nam…
CVSS 3.1MEDIUM 5.3· Local · Low privileges · No interaction · EPSS 0.84841 · Published 2024-03-01 · No fix listed CWE-78
Priority MEDIUM 45
A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnera…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01056 · Published 2023-02-17 · No fix listed CWE-415
Priority LOW 34
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could a…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.07003 · Published 2023-02-16 · No fix listed CWE-611
Priority HIGH 66
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earl…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.30061 · Published 2023-02-16 · No fix listed CWE-120
Priority LOW 37
A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local at…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00573 · Published 2022-08-10 · No fix listed CWE-125
Priority LOW 29
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00388 · Published 2022-05-04 · No fix listed CWE-822
Priority MEDIUM 49
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07117 · Published 2022-05-04 · No fix listed CWE-401
Priority MEDIUM 48
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) version…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05882 · Published 2022-05-04 · No fix listed CWE-399
Priority MEDIUM 53
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.1…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.07074 · Published 2022-05-04 · No fix listed CWE-399
Priority MEDIUM 45
A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service cond…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0329 · Published 2022-01-14 · Fixed in 0.103.5, 0.104.2 CWE-20
Priority MEDIUM 43
A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02132 · Published 2021-04-08 · No fix listed CWE-20
Load more