Approved changes feed: RSS · Atom
cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Exim (394124fe-277b-5eb8-afc3-b5c498937ef9) |
|---|---|
| Product | Exim (6f9e18d0-ac4f-5006-8db5-7919fb601764) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/exim4 |
purl2cpe | 2026-06-01 10:18:20.279185 |
pkg:deb/ubuntu/exim4 |
purl2cpe | 2026-06-01 10:18:20.279186 |
pkg:exim/exim |
purl2cpe | 2026-06-01 10:18:20.279188 |
pkg:github/exim/exim |
purl2cpe | 2026-06-01 10:18:20.279189 |
pkg:rpm/fedora/exim |
purl2cpe | 2026-06-01 10:18:20.279191 |
pkg:rpm/opensuse/exim |
purl2cpe | 2026-06-01 10:18:20.279192 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-66141 |
vulnerable | 2026-07-29 01:06:20.302796 |
Details available
HIGH (7.4)
Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.
Published: 2026-07-24T04:37:46.099Z
Updated: 2026-07-24T18:42:19.559Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-66140 |
vulnerable | 2026-07-29 01:06:20.302609 |
Details available
HIGH (8.4)
Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled.
Published: 2026-07-24T04:32:08.764Z
Updated: 2026-07-24T12:25:04.081Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48840 |
vulnerable | 2026-06-08 08:05:12.328074 |
Details available
MEDIUM (5.3)
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.
Published: 2026-05-30T01:50:42.637Z
Updated: 2026-06-05T09:07:37.892Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45185 |
vulnerable | 2026-06-08 08:05:11.491363 |
Details available
CRITICAL (9.8)
Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.
Published: 2026-05-12T00:00:00.000Z
Updated: 2026-05-14T03:55:55.967Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40687 |
vulnerable | 2026-06-08 08:01:20.913759 |
Details available
MEDIUM (4.8)
In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or erroneous data processing that divulges data from uninitialized heap memory.
Published: 2026-04-30T00:00:00.000Z
Updated: 2026-05-01T14:25:12.276Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40686 |
vulnerable | 2026-06-08 08:01:20.913390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40685 |
vulnerable | 2026-06-08 08:01:20.912978 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40684 |
vulnerable | 2026-06-08 08:01:20.912631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67896 |
vulnerable | 2026-06-08 07:41:20.565288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30232 |
vulnerable | 2026-06-08 07:16:59.329553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26794 |
vulnerable | 2026-06-08 07:14:50.540007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39929 |
vulnerable | 2026-06-08 06:41:51.907235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51766 |
vulnerable | 2026-06-08 06:17:53.881750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42119 |
vulnerable | 2026-06-08 06:11:07.828605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42117 |
vulnerable | 2026-06-08 06:11:07.825799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42116 |
vulnerable | 2026-06-08 06:11:07.825251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42115 |
vulnerable | 2026-06-08 06:11:07.823432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42114 |
vulnerable | 2026-06-08 06:11:07.822884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3620 |
vulnerable | 2026-06-08 05:48:21.557999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3559 |
vulnerable | 2026-06-08 05:48:21.422401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37452 |
vulnerable | 2026-06-08 05:47:12.916164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37451 |
vulnerable | 2026-06-08 05:47:12.915521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38371 |
vulnerable | 2026-06-08 05:32:55.978744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27216 |
vulnerable | 2026-06-08 05:30:46.117125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8015 |
vulnerable | 2026-06-08 05:27:14.655693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28026 |
vulnerable | 2026-06-08 05:23:53.682663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28025 |
vulnerable | 2026-06-08 05:23:53.682214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28024 |
vulnerable | 2026-06-08 05:23:53.681841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28023 |
vulnerable | 2026-06-08 05:23:53.681464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28022 |
vulnerable | 2026-06-08 05:23:53.681194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28021 |
vulnerable | 2026-06-08 05:23:53.680812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28020 |
vulnerable | 2026-06-08 05:23:53.680530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28019 |
vulnerable | 2026-06-08 05:23:53.680090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28018 |
vulnerable | 2026-06-08 05:23:53.679817 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28017 |
vulnerable | 2026-06-08 05:23:53.679249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28016 |
vulnerable | 2026-06-08 05:23:53.678704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28015 |
vulnerable | 2026-06-08 05:23:53.675426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28014 |
vulnerable | 2026-06-08 05:23:53.675133 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28013 |
vulnerable | 2026-06-08 05:23:53.674615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28012 |
vulnerable | 2026-06-08 05:23:53.657938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28011 |
vulnerable | 2026-06-08 05:23:53.657446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28010 |
vulnerable | 2026-06-08 05:23:53.657033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28009 |
vulnerable | 2026-06-08 05:23:53.656685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28008 |
vulnerable | 2026-06-08 05:23:53.656046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28007 |
vulnerable | 2026-06-08 05:23:53.655490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12783 |
vulnerable | 2026-06-08 05:17:59.139669 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16928 |
vulnerable | 2026-06-08 05:13:09.613215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15846 |
vulnerable | 2026-06-08 05:12:58.107965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13917 |
vulnerable | 2026-06-08 05:12:52.415187 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10149 |
vulnerable | 2026-06-08 05:12:22.340050 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6789 |
vulnerable | 2026-06-08 05:11:54.171532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000369 |
vulnerable | 2026-06-08 05:08:34.432137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9963 |
vulnerable | 2026-06-08 05:08:25.125969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1531 |
vulnerable | 2026-06-08 05:07:31.681010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2972 |
vulnerable | 2026-06-08 05:05:30.571746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2957 |
vulnerable | 2026-06-08 05:05:30.515684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1764 |
vulnerable | 2026-06-08 04:58:01.952841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0017 |
vulnerable | 2026-06-08 04:56:33.356430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4345 |
vulnerable | 2026-06-08 04:56:27.240741 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4344 |
vulnerable | 2026-06-08 04:56:27.232799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2024 |
vulnerable | 2026-06-08 04:54:11.299129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2023 |
vulnerable | 2026-06-08 04:54:11.280262 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.