CVE-2020-28023

score

<0.1

cvss

7.5

epss

2.6%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 < 4.94.2 contains an out-of-bounds read caused by smtp_setup_msg, letting unauthenticated SMTP clients disclose sensitive information from process memory, exploit requires sending a crafted SMTP request.