Exim

The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. Check your version and patch or mitigate promptly.

• CVE-2018-6789Exim Buffer Overflow VulnerabilityRansomware

  9.8 critical · over the network, without login · CISA deadline was 3 May 22

• CVE-2019-10149Exim Mail Transfer Agent (MTA) Improper Input Validation

  9.8 critical · over the network, without login · CISA deadline was 10 Jul 22

• CVE-2019-16928Exim Out-of-bounds Write Vulnerability

  9.8 critical · over the network, without login · CISA deadline was 17 Mar 22

• CVE-2010-4344Exim Heap-Based Buffer Overflow Vulnerability

  9.8 critical · over the network, without login · CISA deadline was 15 Apr 22

• CVE-2010-4345Exim Privilege Escalation Vulnerability

  7.8 high · locally only, with a basic account · CISA deadline was 15 Apr 22

Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.