Cisco Secure Endpoint vulnerabilities

20 CVEs affecting Cisco Secure Endpoint, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20348, published 2026-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20290, published 2024-02-07. High severity, CVSS 7.5. EPSS: 33.3% chance of exploitation in the next 30 days. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is…
CVE-2023-20032, published 2023-03-01. Critical severity, CVSS 9.8. EPSS: 29.3% chance of exploitation in the next 30 days. On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and…
CVE-2022-20785, published 2022-05-04. High severity, CVSS 7.5. EPSS: 7.1% chance of exploitation in the next 30 days. On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus…
CVE-2022-20770, published 2022-05-04. High severity, CVSS 7.5. EPSS: 7.1% chance of exploitation in the next 30 days. On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus…
CVE-2023-20052, published 2023-03-01. Medium severity, CVSS 5.3. EPSS: 6.9% chance of exploitation in the next 30 days. On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and…
CVE-2022-20771, published 2022-05-04. High severity, CVSS 7.5. EPSS: 5.9% chance of exploitation in the next 30 days. On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam…
CVE-2023-20212, published 2023-08-18. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a…
CVE-2025-20128, published 2025-01-22. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected…
CVE-2023-20197, published 2023-08-16. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…
CVE-2025-20234, published 2025-06-18. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This…

Latest

CVE-2026-20348, published 2026-08-07. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory…
CVE-2026-20244, published 2026-07-01. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption…
CVE-2026-20243, published 2026-07-01. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption…
CVE-2026-20217, published 2026-07-01. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory…
CVE-2026-20216, published 2026-07-01. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to…
CVE-2026-20215, published 2026-07-01. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption…
CVE-2026-20214, published 2026-07-01. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption…
CVE-2026-20213, published 2026-07-01. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption…