Patchfirst
Patchfirst

Vendor

Exim

5 of 6 Exim CVEs in Patchfirst (83%) are in of vulnerabilities exploited in the wild, 1 of them used by ransomware.

CVEs
6
In CISA KEV
583%
Known ransomware use
1
Median days to KEV
1,364
from publication
Latest KEV listing
25 Mar 2022
Watch Exim Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Exim In KEV: 3 CVEs: 4
  • Exim Internet Mailer In KEV: 1 CVEs: 1
  • Mail Transfer Agent (MTA) In KEV: 1 CVEs: 1

Top ATT&CK techniques

What attackers do with Exim CVEs
Open in ATT&CK Navigator

Counts are Exim CVEs linked to the technique. Each link’s provenance is on the CVE page.

Exim CVEs

6 CVEs, by priority
  1. CVE-2018-6789Exim Buffer Overflow Vulnerability
    Exim · EximKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    82.1%Top 0.35%
    79.8priority
  2. CVE-2019-10149Exim Mail Transfer Agent (MTA) Improper Input Validation
    Exim · Mail Transfer Agent (MTA)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter3 reports
    >99.9%Top 0.02%
    77.6priority
  3. CVE-2010-4344Exim Heap-Based Buffer Overflow Vulnerability
    Exim · EximKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application
    71.7%Top 0.58%
    69.7priority
  4. CVE-2019-16928Exim Out-of-bounds Write Vulnerability
    Exim · Exim Internet MailerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application
    41.6%Top 1.3%
    69.6priority
  5. CVE-2010-4345Exim Privilege Escalation Vulnerability
    Exim · EximKEVPublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter
    18.0%Top 2.8%
    67.9priority
  6. CVE-2025-26794Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection
    Exim · EximPublic exploitHigh · 7.5
    77.5%Top 0.44%
    30.2priority
↑ ↓ chooseEnter openEsc close