# Exim vulnerabilities > Exim has 57 published vulnerabilities across 1 product in our catalogue. 5 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Exim, with 57. If you run Exim software, patch the exploited flaws first. Canonical page: https://www.edgeprotect.io/vendors/exim ## At a glance - **Published vulnerabilities:** 57 - **Known to be exploited:** 5 - **Products:** 1 - **Versions:** 112 - **Most recently added to the known-exploited list:** [CVE-2010-4344](https://www.edgeprotect.io/what-is/cve-2010-4344), 25 March 2022. We keep watching the list. ## Which Exim products have the most vulnerabilities? - [Exim](https://www.edgeprotect.io/product/exim/exim): 57 published vulnerabilities, 112 versions Each product page lists its own known-exploited flaws. ## Which Exim vulnerabilities are being exploited? 5 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2010-4344](https://www.edgeprotect.io/what-is/cve-2010-4344): Exim Heap-Based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 72%, known exploited since 25 March 2022. - [CVE-2010-4345](https://www.edgeprotect.io/what-is/cve-2010-4345): Exim Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 18%, known exploited since 25 March 2022. - [CVE-2019-16928](https://www.edgeprotect.io/what-is/cve-2019-16928): Exim Out-of-bounds Write Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 42%, known exploited since 3 March 2022. - [CVE-2019-10149](https://www.edgeprotect.io/what-is/cve-2019-10149): Exim Mail Transfer Agent (MTA) Improper Input Validation. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 10 January 2022. - [CVE-2018-6789](https://www.edgeprotect.io/what-is/cve-2018-6789): Exim Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 82%, known exploited since 3 November 2021. ## Which Exim flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2019-10149](https://www.edgeprotect.io/what-is/cve-2019-10149): >99%, Critical (CVSS 9.8), known exploited - [CVE-2018-6789](https://www.edgeprotect.io/what-is/cve-2018-6789): 82%, Critical (CVSS 9.8), known exploited - [CVE-2025-26794](https://www.edgeprotect.io/what-is/cve-2025-26794): 77%, High (CVSS 7.5) - [CVE-2010-4344](https://www.edgeprotect.io/what-is/cve-2010-4344): 72%, Critical (CVSS 9.8), known exploited - [CVE-2017-16944](https://www.edgeprotect.io/what-is/cve-2017-16944): 63%, High (CVSS 7.5) - [CVE-2020-28019](https://www.edgeprotect.io/what-is/cve-2020-28019): 62%, High (CVSS 7.5) - [CVE-2020-28018](https://www.edgeprotect.io/what-is/cve-2020-28018): 56%, Critical (CVSS 9.8) - [CVE-2017-16943](https://www.edgeprotect.io/what-is/cve-2017-16943): 47%, Critical (CVSS 9.8) - [CVE-2019-16928](https://www.edgeprotect.io/what-is/cve-2019-16928): 42%, Critical (CVSS 9.8), known exploited - [CVE-2020-28017](https://www.edgeprotect.io/what-is/cve-2020-28017): 37%, Critical (CVSS 9.8) ## All Exim products we track 1 products with at least one tracked version, most vulnerabilities first: - [Exim](https://www.edgeprotect.io/product/exim/exim): 57 vulnerabilities, 112 versions ## Questions ### How many vulnerabilities does Exim have? Our catalogue lists 57 published vulnerabilities across 1 product and 112 versions from Exim. The most recent Exim flaw added to the known-exploited list is CVE-2010-4344, on 25 March 2022. ### Which Exim vulnerabilities are being exploited? 5 Exim vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2010-4344, CVE-2010-4345 and CVE-2019-16928. The full list is on this page. ### Which Exim product has the most vulnerabilities? Exim, with 57 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Exim vulnerabilities? Create a EdgeProtect account and track the Exim products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Exim? EdgeProtect keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.edgeprotect.io/register Book a demo: https://www.edgeprotect.io/contact