CVE-2026-20348

Vendor

Microsoft, Cisco

CVSS

7.5

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 20
   Advisory MSRC 11 Aug 2026

   CVE-2026-20348 ClamAV XAR File Format Processing Memory Corruption Vulnerability

   Information published.

   CVE-2026-20348 Microsoft
2. 19
   Cisco advisory Cisco PSIRT 7 Aug 2026

   ClamAV Vulnerabilities Affecting Cisco Products: August 2026

   Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service (DoS) condition, interrupting scanning operations. For more information about these vulnerabilities, see the Details section of this…

   Fix available CVE-2026-20337CVE-2026-20338CVE-2026-20339+4 more Cisco
3. 10
   CVE NVD 7 Aug 2026

   A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other…

   A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This…

   CVSS 7.5 CVE-2026-20348