Vendor
Exim
As of , 5 Exim vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2010-4344.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2010-4344Heap-Based Buffer Overflow | Exim Exim | Patch this weekMetasploit module; EPSS 0.72; verified Exploit-DB entry | 0.72 | ||
| 2 | CVE-2019-10149Improper Input Validation | Exim Mail Transfer Agent (MTA) | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| 3 | CVE-2010-4345Privilege Escalation | Exim Exim | Patch this weekMetasploit module; verified Exploit-DB entry | 0.18 | ||
| 4 | CVE-2018-6789Buffer Overflow | Exim Exim | Patch this weekRansomware use; EPSS 0.82 | 0.82 | ||
| 5 | CVE-2019-16928Out-of-bounds Write | Exim Exim Internet Mailer | Patch soon | 0.42 |
Products
- Exim3 entries
- Exim Internet Mailer1 entry
- Mail Transfer Agent (MTA)1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 1 |
| 2022 | 4 |
| 2023 | none |
| 2024 | none |
| 2025 | none |
| 2026 | none |