Home / CVEs
Exploited vulnerabilities (CISA KEV)
CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.
CVE-2019-16928
Critical · 9.8
KEV High · 63 CWE-787 Sep 27, 2019
Exim Out-of-bounds Write Vulnerability
Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.
CVE-2019-10149
Critical · 9.8
KEV Urgent · 80 Public exploit CWE-78 Jun 5, 2019
Exim Mail Transfer Agent (MTA) Improper Input Validation
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
CVE-2018-6789
Critical · 9.8
KEV Urgent · 87 Public exploit Ransomware CWE-120 Feb 8, 2018
Exim Buffer Overflow Vulnerability
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.
CVE-2010-4344
Critical · 9.8
KEV Urgent · 83 Public exploit CWE-787 Dec 14, 2010
Exim Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.
CVE-2010-4345
High · 7.8
KEV Urgent · 76 Public exploit CWE-77 Dec 14, 2010
Exim Privilege Escalation Vulnerability
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.