{"meta":{"title":"KEV entries: Exim","description":"All KEV entries for vendor Exim.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":5,"vendor":"Exim","entries":5,"shareOfCatalogPercent":0.3,"ransomwareKnown":1,"firstDateAdded":"2021-11-03","latestDateAdded":"2022-03-25","rank":44},"data":[{"cveID":"CVE-2010-4345","vendorProject":"Exim","product":"Exim","vulnerabilityName":"Exim Privilege Escalation Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-264"],"shortDescription":"Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-4345","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2010-4345"},{"cveID":"CVE-2010-4344","vendorProject":"Exim","product":"Exim","vulnerabilityName":"Exim Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-4344","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2010-4344"},{"cveID":"CVE-2019-16928","vendorProject":"Exim","product":"Exim Internet Mailer","vulnerabilityName":"Exim Out-of-bounds Write Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-16928","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2019-16928"},{"cveID":"CVE-2019-10149","vendorProject":"Exim","product":"Mail Transfer Agent (MTA)","vulnerabilityName":"Exim Mail Transfer Agent (MTA) Improper Input Validation","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-10149","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2019-10149"},{"cveID":"CVE-2018-6789","vendorProject":"Exim","product":"Exim","vulnerabilityName":"Exim Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Known","cwes":["CWE-119"],"shortDescription":"Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-6789","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2018-6789"}]}