CVE-2020-28010

score

<0.1

cvss

7.8

epss

0.4%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 before 4.94.2 contains an out-of-bounds write caused by copying the current working directory pathname into a buffer that is too small in the main function, letting local attackers cause memory corruption, exploit requires setuid root privileges.