Patchfirst: Exim vulnerabilitieshttps://patchfirst.co/vendor/exim/New and newly exploited Exim CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2025-26794: Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injectionhttps://patchfirst.co/cve/CVE-2025-26794/CVE-2025-26794Fri, 21 Feb 2025 00:00:00 GMTExim · Exim. Not in CISA KEV. EPSS 77.5% (higher than 99.56% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 30.2 of 100.public-exploit[KEV] CVE-2010-4344: Exim Heap-Based Buffer Overflow Vulnerabilityhttps://patchfirst.co/cve/CVE-2010-4344/CVE-2010-4344#kevFri, 25 Mar 2022 00:00:00 GMTExim · Exim. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 71.7% (higher than 99.42% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 69.7 of 100.kevpublic-exploitT1190[KEV] CVE-2010-4345: Exim Privilege Escalation Vulnerabilityhttps://patchfirst.co/cve/CVE-2010-4345/CVE-2010-4345#kevFri, 25 Mar 2022 00:00:00 GMTExim · Exim. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 18.0% (higher than 97.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 67.9 of 100.kevpublic-exploitT1078T1059[KEV] CVE-2019-16928: Exim Out-of-bounds Write Vulnerabilityhttps://patchfirst.co/cve/CVE-2019-16928/CVE-2019-16928#kevThu, 03 Mar 2022 00:00:00 GMTExim · Exim Internet Mailer. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 41.6% (higher than 98.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 69.6 of 100.kevpublic-exploitT1190[KEV] CVE-2019-10149: Exim Mail Transfer Agent (MTA) Improper Input Validationhttps://patchfirst.co/cve/CVE-2019-10149/CVE-2019-10149#kevMon, 10 Jan 2022 00:00:00 GMTExim · Mail Transfer Agent (MTA). In CISA KEV since 2022-01-10. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1190 Exploit Public-Facing Application. Named in 3 threat reports. Priority 77.6 of 100.kevpublic-exploitT1059T1190[KEV] CVE-2018-6789: Exim Buffer Overflow Vulnerabilityhttps://patchfirst.co/cve/CVE-2018-6789/CVE-2018-6789#kevWed, 03 Nov 2021 00:00:00 GMTExim · Exim. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 82.1% (higher than 99.65% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1059