Approved changes feed: RSS · Atom

cpe:2.3:a:clamxav:clamxav:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorClamxav (fd23b9db-2c93-5aba-bcb6-7effe0b2a7c9)
ProductClamxav (40d2d448-2c7d-501d-ad80-b03a636572b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24245 vulnerable 2026-06-08 06:29:41.185843 Details available
An issue in Canimaan Software LTD ClamXAV v3.1.2 through v3.6.1 and fixed in v.3.6.2 allows a local attacker to escalate privileges via the ClamXAV helper tool component.
Published: 2024-04-09T00:00:00.000Z
Updated: 2024-08-23T20:29:57.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26893 vulnerable 2026-06-08 05:23:51.647302 Details available
An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 (running with an injected malicious dylib) to communicate with ClamXAV 3's helper tool and perform privileged operations. This occurs because of inadequate client verification in the helper tool.
Published: 2020-10-16T12:53:54.000Z
Updated: 2024-08-04T16:03:22.896Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.