CVE-2024-24245: Clamxav

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue in Canimaan Software LTD ClamXAV v3.1.2 through v3.6.1 and fixed in v.3.6.2 allows a local attacker to escalate privileges via the ClamXAV helper tool component.

Affected products

• Clamxav Clamxav: from 3.1.2, before 3.6.2 (fixed in 3.6.2)

Published 2024-04-09. Last modified 2026-06-17.