Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path.May 12, 2026
- Critical9.1In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection ins…Apr 30, 2026
- Medium5.3In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data).Apr 30, 2026
- Critical9.8In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, becaus…Apr 30, 2026
- High7.5In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records.Apr 30, 2026
- Critical9.8Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database records are cast directly to intern…EPSS 0.5%Dec 14, 2025
- Critical9.8Exim Out-of-bounds Write VulnerabilityKEVEPSS 41.6%Sep 27, 2019
- Critical9.8Exim Mail Transfer Agent (MTA) Improper Input ValidationKEVEPSS 100.0%Jun 5, 2019
- Critical9.8Exim Buffer Overflow VulnerabilityKEVEPSS 82.1%Feb 8, 2018
- High7.8Exim Privilege Escalation VulnerabilityKEVEPSS 18.0%Dec 14, 2010
- Critical9.8Exim Heap-Based Buffer Overflow VulnerabilityKEVEPSS 71.7%Dec 14, 2010
11 records · page 1 of 1
PreviousNext