5.3
Medium
CVE-2026-20031 A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote…
Description
A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Endpoint 8.4 | 8.4.0 → 8.4.5.30483 | No fix stated |
| Cisco Secure Endpoint 8.2 | 8.2.1.21612 → 8.2.4.30130 | No fix stated |
| Cisco Secure Endpoint 8.1 | 8.1.3 → 8.1.7.21585 | No fix stated |
| Cisco Secure Endpoint 8.0 | 8.0.1.21160 → 8.0.1.21164 | No fix stated |
| Cisco Secure Endpoint 7.5 | 7.5.1.20813 → 7.5.21.21732 | No fix stated |
| Cisco Secure Endpoint 7.4 | 7.4.1 → 7.4.5 | No fix stated |
| Cisco Secure Endpoint 7.3 | 7.3.1 → 7.3.15 | No fix stated |
| Cisco Secure Endpoint 7.2 | 7.2.3 → 7.2.13 | No fix stated |
| Cisco Secure Endpoint 7.1 | 7.1.1 → 7.1.5 | No fix stated |
Show the 40 other branches Hide the 40 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Endpoint | 7.0.5 | No fix stated |
| Cisco Secure Endpoint 6.3 | 6.3.1 → 6.3.7 | No fix stated |
| Cisco Secure Endpoint 6.2 | 6.2.1 → 6.2.19 | No fix stated |
| Cisco Secure Endpoint 6.1 | 6.1.5 → 6.1.9 | No fix stated |
| Cisco Secure Endpoint 6.0 | 6.0.7 → 6.0.9 | No fix stated |
| Cisco Secure Endpoint | 2.11.0 | No fix stated |
| Cisco Secure Endpoint 2.10 | 2.10.0 → 2.10.1 | No fix stated |
| Cisco Secure Endpoint | 2.9.0 | No fix stated |
| Cisco Secure Endpoint | 2.8.0 | No fix stated |
| Cisco Secure Endpoint | 2.7.0 | No fix stated |
| Cisco Secure Endpoint | 2.6.0 | No fix stated |
| Cisco Secure Endpoint | 2.5.0 | No fix stated |
| Cisco Secure Endpoint | 2.4.0 | No fix stated |
| Cisco Secure Endpoint | 2.3.0 | No fix stated |
| Cisco Secure Endpoint | 2.2.0 | No fix stated |
| Cisco Secure Endpoint | 2.1.0.14 | No fix stated |
| Cisco Secure Endpoint 2.0 | 2.0.0 → 2.0.2 | No fix stated |
| Cisco Secure Endpoint 1.27 | 1.27.0 → 1.27.2 | No fix stated |
| Cisco Secure Endpoint 1.26 | 1.26.0 → 1.26.1 | No fix stated |
| Cisco Secure Endpoint 1.25 | 1.25.0 → 1.25.2 | No fix stated |
| Cisco Secure Endpoint 1.24 | 1.24.0 → 1.24.5 | No fix stated |
| Cisco Secure Endpoint 1.23 | 1.23.0 → 1.23.1 | No fix stated |
| Cisco Secure Endpoint 1.22 | 1.22.0 → 1.22.4 | No fix stated |
| Cisco Secure Endpoint 1.21 | 1.21.0 → 1.21.3 | No fix stated |
| Cisco Secure Endpoint 1.20 | 1.20.0 → 1.20.8 | No fix stated |
| Cisco Secure Endpoint | 1.19.0 | No fix stated |
| Cisco Secure Endpoint 1.18 | 1.18.0 → 1.18.1 | No fix stated |
| Cisco Secure Endpoint 1.17 | 1.17.0 → 1.17.2 | No fix stated |
| Cisco Secure Endpoint 1.16 | 1.16.0 → 1.16.3 | No fix stated |
| Cisco Secure Endpoint 1.15 | 1.15.0 → 1.15.6 | No fix stated |
| Cisco Secure Endpoint 1.14 | 1.14.0 → 1.14.1 | No fix stated |
| Cisco Secure Endpoint 1.13 | 1.13.0 → 1.13.2 | No fix stated |
| Cisco Secure Endpoint 1.12 | 1.12.0 → 1.12.7 | No fix stated |
| Cisco Secure Endpoint 1.11 | 1.11.0 → 1.11.1 | No fix stated |
| Cisco Secure Endpoint 1.10 | 1.10.0 → 1.10.2 | No fix stated |
| Cisco Secure Endpoint 1.9 | 1.9.0 → 1.9.1 | No fix stated |
| Cisco Secure Endpoint 1.8 | 1.8.0 → 1.8.4 | No fix stated |
| Cisco Secure Endpoint | 1.7.0 | No fix stated |
| Cisco Secure Endpoint | 1.6.0 | No fix stated |
| Cisco Secure Endpoint | 1.1.0 | No fix stated |
Other CVEs of Cisco Secure Endpoint
The 23 CVEs of Cisco Secure Endpoint →
CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS…
7.5
High
CVE-2026-20345
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS…
7.5
High
CVE-2026-20339
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a…
7.5
High
CVE-2026-20347
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a…
7.5
High