Answer in brief
CVE-2026-20337 records a Unknown severity vulnerability in ClamAV ZIP File Format Processing Memory Corruption Vulnerability. The current sources do not mark it as known exploited. The current feed maps Cisco/Cisco Secure Endpoint (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Cisco/Cisco Secure Endpoint (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Cisco/Cisco Secure Endpointgeneric | 7.0.5 || 6.2.19 || 7.3.3 || 7.2.13 || 6.1.5 || 6.3.1 || 6.2.5 || 7.3.5 || 6.2.1 || 7.2.7 || 7.1.1 || 6.3.5 || 6.2.9 || 7.3.1 || 6.1.7 || 7.2.11 || 7.2.3 || 7.1.5 || 6.3.3 || 7.3.9 || 6.2.3 || 6.1.9 || 6.0.9 || 7.2.5 || 6.0.7 || 6.3.7 || 1.12.3 || 1.8.0 || 1.11.1 || 1.12.4 || 1.10.0 || 1.12.0 || 1.8.1 || 1.10.1 || 1.12.1 || 1.12.6 || 1.14.0 || 1.10.2 || 1.12.7 || 1.12.2 || 1.6.0 || 1.9.0 || 1.11.0 || 1.7.0 || 1.13.0 || 1.8.4 || 1.13.1 || 1.9.1 || 1.12.5 || 1.13.2 || 8.1.7.21512 || 8.1.7 || 8.1.5 || 8.1.3.21242 || 8.1.3 || 8.1.5.21322 || 8.1.7.21417 || 1.14.1 || 1.15.1 || 1.15.2 || 1.15.3 || 1.15.4 || 1.15.5 || 1.15.6 || 1.16.0 || 1.16.1 || 1.16.2 || 1.16.3 || 1.18.0 || 1.18.1 || 1.20.0 || 1.21.0 || 1.21.1 || 1.21.2 || 1.21.3 || 1.22.0 || 1.22.1 || 1.22.2 || 1.22.3 || 1.22.4 || 1.24.0 || 1.24.1 || 1.24.2 || 1.24.3 || 1.24.4 || 1.26.0 || 1.24.5 || 1.26.1 || 1.27.0 || 1.15.0 || 1.17.0 || 1.17.1 || 1.17.2 || 1.19.0 || 1.20.1 || 1.20.2 || 1.20.3 || 1.20.4 || 1.20.5 || 1.20.6 || 1.23.0 || 1.23.1 || 1.20.7 || 1.20.8 || 1.25.0 || 1.25.1 || 1.25.2 || 1.27.1 || 1.27.2 || 7.3.13 || 7.3.15 || 7.4.1 || 7.4.1.20425 || 7.4.1.20439 || 7.4.3 || 7.4.3.20679 || 7.4.5 || 7.5.1.20813 || 7.5.1.20833 || 7.5.3 || 7.5.5 || 8.0.1.21160 || 8.0.1.21164 || 7.5.7 || 7.5.9 || 7.5.11 || 8.1.7.21585 || 7.5.13.21586 || 7.5.13.21598 || 8.2.1.21612 || 8.2.1.21650 || 7.5.15.21611 || 7.5.17.21680 || 8.2.3.30119 || 8.2.4.30130 || 8.4.0 || 7.5.19 || 8.4.1.30298 || 8.4.2.30317 || 8.4.1.30307 || 7.5.20 || 8.4.3 || 8.4.4.30419 || 8.4.4.30467 || 7.5.21.21732 || 8.4.5.30483 | Not reported |
Published upstream
Aug 7, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 7, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 7, 2026
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-20337 records a Unknown severity vulnerability in ClamAV ZIP File Format Processing Memory Corruption Vulnerability. The current sources do not mark it as known exploited. The current feed maps Cisco/Cisco Secure Endpoint (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Cisco/Cisco Secure Endpoint (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Cisco/Cisco Secure Endpointgeneric | 7.0.5 || 6.2.19 || 7.3.3 || 7.2.13 || 6.1.5 || 6.3.1 || 6.2.5 || 7.3.5 || 6.2.1 || 7.2.7 || 7.1.1 || 6.3.5 || 6.2.9 || 7.3.1 || 6.1.7 || 7.2.11 || 7.2.3 || 7.1.5 || 6.3.3 || 7.3.9 || 6.2.3 || 6.1.9 || 6.0.9 || 7.2.5 || 6.0.7 || 6.3.7 || 1.12.3 || 1.8.0 || 1.11.1 || 1.12.4 || 1.10.0 || 1.12.0 || 1.8.1 || 1.10.1 || 1.12.1 || 1.12.6 || 1.14.0 || 1.10.2 || 1.12.7 || 1.12.2 || 1.6.0 || 1.9.0 || 1.11.0 || 1.7.0 || 1.13.0 || 1.8.4 || 1.13.1 || 1.9.1 || 1.12.5 || 1.13.2 || 8.1.7.21512 || 8.1.7 || 8.1.5 || 8.1.3.21242 || 8.1.3 || 8.1.5.21322 || 8.1.7.21417 || 1.14.1 || 1.15.1 || 1.15.2 || 1.15.3 || 1.15.4 || 1.15.5 || 1.15.6 || 1.16.0 || 1.16.1 || 1.16.2 || 1.16.3 || 1.18.0 || 1.18.1 || 1.20.0 || 1.21.0 || 1.21.1 || 1.21.2 || 1.21.3 || 1.22.0 || 1.22.1 || 1.22.2 || 1.22.3 || 1.22.4 || 1.24.0 || 1.24.1 || 1.24.2 || 1.24.3 || 1.24.4 || 1.26.0 || 1.24.5 || 1.26.1 || 1.27.0 || 1.15.0 || 1.17.0 || 1.17.1 || 1.17.2 || 1.19.0 || 1.20.1 || 1.20.2 || 1.20.3 || 1.20.4 || 1.20.5 || 1.20.6 || 1.23.0 || 1.23.1 || 1.20.7 || 1.20.8 || 1.25.0 || 1.25.1 || 1.25.2 || 1.27.1 || 1.27.2 || 7.3.13 || 7.3.15 || 7.4.1 || 7.4.1.20425 || 7.4.1.20439 || 7.4.3 || 7.4.3.20679 || 7.4.5 || 7.5.1.20813 || 7.5.1.20833 || 7.5.3 || 7.5.5 || 8.0.1.21160 || 8.0.1.21164 || 7.5.7 || 7.5.9 || 7.5.11 || 8.1.7.21585 || 7.5.13.21586 || 7.5.13.21598 || 8.2.1.21612 || 8.2.1.21650 || 7.5.15.21611 || 7.5.17.21680 || 8.2.3.30119 || 8.2.4.30130 || 8.4.0 || 7.5.19 || 8.4.1.30298 || 8.4.2.30317 || 8.4.1.30307 || 7.5.20 || 8.4.3 || 8.4.4.30419 || 8.4.4.30467 || 7.5.21.21732 || 8.4.5.30483 | Not reported |
Published upstream
Aug 7, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 7, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 7, 2026
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper boundary checks for content in zip files during scanning, which may result in an out-of-bounds write condition. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Quoted source text, attributed separately from HOL analysis.