VIRY.CZRADAR
sektor
téma
typ textu

← nejvýznamnější zprávy · všechny zprávy

poslední zpráva

SPOJENO PŘES CVE EPSS 0.01

ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Clam AntiVirus. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 8.4. The following CVEs are assigned: CVE-2026-20215.

Číst originál na Zero Day Initiative →

2 zprávy z 2 zdrojů · první CZ · EN/orig

Clam AntiVirus ClamAV US

CVE v události 1

CVEhodnoceníKEVEPSS
CVE-2026-20215 7.5 3.1 · cisco – 0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.4.

Jak se o tom psalo 2

  1. · Zero Day Initiative US nadpis události

    ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Clam AntiVirus. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 8.4. The following CVEs are assigned: CVE-2026-20215.

  2. · Microsoft Security US

    CVE-2026-20215 ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability

    Information published.