CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–5 of 5 records

CVE Vendor Product Added Due Status
CVE-2010-4344 — Exim Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.
 Exim Exim Mar 25, 2022 Apr 15, 2022
CVE-2010-4345 — Exim Privilege Escalation Vulnerability
Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.
 Exim Exim Mar 25, 2022 Apr 15, 2022
CVE-2019-16928 — Exim Out-of-bounds Write Vulnerability
Exim contains an out-of-bounds write vulnerability which can allow for remote code execution.
 Exim Exim Internet Mailer Mar 3, 2022 Mar 17, 2022
CVE-2019-10149 — Exim Mail Transfer Agent (MTA) Improper Input Validation
Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.
 Exim Mail Transfer Agent (MTA) Jan 10, 2022 Jul 10, 2022
CVE-2018-6789 — Exim Buffer Overflow Vulnerability
Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.
 Exim Exim Nov 3, 2021 May 3, 2022 Ransomware