CVE-2020-28011

score

<0.1

cvss

7.8

epss

0.4%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 < 4.94.2 contains a heap-based buffer overflow caused by the sender options -R and -S in queue_run, letting attackers escalate privileges to root, exploit requires attacker to control sender options.