Clamxav is a macOS antivirus utility with a narrow product scope centered on a single scanning application that integrates the ClamAV engine for threat detection. Its disclosed vulnerabilities cluster around privilege-escalation and data-authenticity issues, reflecting the sensitive access required for system-level malware scanning on consumer endpoints. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Clamxav over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-26893HIGH An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 (running with an injected malicious dylib) to communicate with Cl | Oct 16, 2020 | 7.8 | 24 | NO | NO |
CVE-2024-24245HIGH An issue in Canimaan Software LTD ClamXAV v3.1.2 through v3.6.1 and fixed in v.3.6.2 allows a local attacker to escalate privileges via the ClamXAV helper tool component. | Apr 9, 2024 | 7.8 | 22 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Clamxav.
Media articles that mention a CVE ID that affects a product developed by Clamxav — matched by CVE ID, not by vendor name.