CVE-2020-28012

score

<0.1

cvss

7.8

epss

0.4%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 < 4.94.2 contains a vulnerability that exposes file descriptors to an unintended control sphere caused by rda_interpret using a privileged pipe without a close-on-exec flag, letting local attackers access sensitive file descriptors, exploit requires local access.