Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Exim: actively exploited vulnerabilities

5 vulnerabilities in Exim products (Exim) are in CISA’s catalog of exploited vulnerabilities. Last added: March 25, 2022.

Exim security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Exim category to your radar, or open its page.

  • Email 5 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Exim 5 vulnerabilities · Email

Name used by CISA: Exim. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Exim list.

  1. Rank 1Exim

    CVE-2010-4344

    CVE from 2010, added in 2022

    Exim Heap-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Exim

    CVE-2019-16928

    CVE from 2019, added in 2022

    Exim Out-of-bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  3. Rank 3Exim

    CVE-2019-10149

    CVE from 2019, added in 2022

    Exim Mail Transfer Agent (MTA) Improper Input Validation

    Added more than a year ago: ranked by severity.

    Added
    Jan 10, 2022
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  4. Rank 4Exim

    CVE-2018-6789

    RansomwareCVE from 2018, added in 2021

    Exim Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  5. Rank 5Exim

    CVE-2010-4345

    CVE from 2010, added in 2022

    Exim Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

Follow and verify

Get new Exim vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.