Clam Antivirus
31 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Clam Antivirus, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
Clam Antivirus CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 1 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 1 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 1 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 31 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- High17
- Medium10
Latest CVEs
The 15 most recently published vulnerabilities affecting Clam Antivirus.
- CVE-2020-37167ClamAV ClamBC < 0.103.0-rc - 'ClamBC' Executable Regular Expression Error8.4
- CVE-2025-20260ClamAV PDF Scanning Buffer Overflow Vulnerability9.8
- CVE-2025-20128ClamAV OLE2 File Format Decryption Denial of Service Vulnerability5.3
- CVE-2024-20506ClamAV Privilege Handling Escalation Vulnerability6.1
- CVE-2024-20505ClamAV Memory Handling DoS4.0
- CVE-2024-20380ClamAV HTML Parser Denial of Service Vulnerability7.5
- CVE-2024-20328ClamAV VirusEvent File Processing Command Injection Vulnerability5.3
- CVE-2024-20290A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is...7.5
- CVE-2022-20803ClamAV Double-free Vulnerability in the OLE2 File Parser8.6
- CVE-2023-20052On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and...5.3
- CVE-2023-20032On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and e...9.8
- CVE-2022-20792A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an ...7.8
- CVE-2022-20796ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 20226.5
- CVE-2022-20785ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 20227.5
- CVE-2022-20771ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 20227.5
Product grouping is registry-driven, with AI assist and human review. How it works