EX
Product
exim
On CISA KEVExploited in the wildRansomware-linked
70
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 23High 26Medium 12Low 1
Watch
Add exim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-28014 | 6.1 | May 6 | Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges Affected: 4.00 before 4.94.2 |
| CVE-2016-9963 | 5.9 | Feb 1 | Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages Affected: through 4.87 |
| CVE-2024-39929 | 5.4 | Jul 4 | Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protection mechanism, and potentially… Affected: through 4.97.1 |
| CVE-2026-94057 | 5.3 | Sep 19 | Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA… Affected: before 4.100.1 |
| CVE-2026-94055 | 5.3 | Sep 19 | Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free Affected: 4.98 before 4.100.1 |
| CVE-2026-94054 | 5.3 | Sep 19 | Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write Affected: 4.83 before 4.100.1 |
| CVE-2026-48840 | 5.3 | May 30 | Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client Affected: 4.88 before 4.99.4 |
| CVE-2026-40686 | 5.3 | Apr 30 | In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data) Affected: before 4.99.2 |
| CVE-2023-42114 | 5.3 | May 3 | Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability Affected: before 4.96.1 |
| CVE-2023-51766 | 5.3 | Dec 24 | Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations Affected: before 4.97.1 |
| CVE-2017-1000369 | 4.0 | Jun 19 | Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary… Affected: through 4.87.1; 4.88; 4.88; 4.88; 4.88; 4.88; +10 more |
| CVE-2023-42119 | 3.1 | May 3 | Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability Affected: before 4.96.2 |
| CVE-2014-2972 | – | Sep 4 | expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value Affected: through 4.82.1; 4.00; 4.01; 4.02; 4.03; 4.04; +34 more |
| CVE-2014-2957 | – | Sep 4 | The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email,… Affected: through 4.82; 4.00; 4.01; 4.02; 4.03; 4.04; +34 more |
| CVE-2012-5671 | – | Oct 31 | Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not… Affected: 4.70; 4.71; 4.72; 4.73; 4.74; 4.75; +3 more |
| CVE-2011-1764 | – | Oct 5 | Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of… Affected: through 4.75; 2.10; 2.11; 2.12; 3.00; 3.01; +34 more |
| CVE-2011-1407 | – | May 16 | The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead of only strings, which allows remote attackers to execute… Affected: 4.70; 4.71; 4.72; 4.73; 4.74; 4.75 |
| CVE-2011-0017 | – | Feb 2 | The open_log function in log.c in Exim 4.72 and earlier does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to… Affected: through 4.72; 2.10; 2.11; 2.12; 3.00; 3.01; +34 more |
| CVE-2010-2024 | – | Jun 7 | transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial… Affected: through 4.71; 4.10; 4.20; 4.21; 4.22; 4.23; +27 more |
| CVE-2010-2023 | – | Jun 7 | transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users… Affected: through 4.71; 4.10; 4.20; 4.21; 4.22; 4.23; +27 more |