Brand
Exim: actively exploited vulnerabilities
5 vulnerabilities in Exim products (Exim) are in CISA’s catalog of exploited vulnerabilities. Last added: March 25, 2022.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
0 vulnerabilities added in the last 12 months
-
5 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Exim category to your radar, or open its page.
- Email 5 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Exim5 vulnerabilities, Email
Name used by CISA: Exim. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Exim list.
- Rank 1
EximCVE-2010-4344
Exim Heap-Based Buffer Overflow Vulnerability
CVE from 2010, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 2
EximCVE-2019-16928
Exim Out-of-bounds Write Vulnerability
CVE from 2019, added in 2022
CVSS severity 9.8critical
Added Mar 3, 2022
- Rank 3
EximCVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation
CVE from 2019, added in 2022
CVSS severity 9.8critical
Added Jan 10, 2022
- Rank 4
EximCVE-2018-6789
Exim Buffer Overflow Vulnerability
RansomwareCVE from 2018, added in 2021
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 5
EximCVE-2010-4345
Exim Privilege Escalation Vulnerability
CVE from 2010, added in 2022
CVSS severity 7.8high
Added Mar 25, 2022
Follow and verify
Get new Exim vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.