GCVE-110-NCSC-2026-163

Advisory PublishedCVSS 9.8/10

Vulnetix · Advisory published May 15, 2026

Exim versions prior to 4.99.3 contain a remotely exploitable use-after-free vulnerability in the BDAT body parsing path with certain GnuTLS configurations, enabling unauthenticated attackers to cause heap corruption and potentially execute arbitrary code.

Download JSON Open in Console

Weaknesses (CWE)

CWE-416Use After Free

Risk Scores

CVSS 3.1

9.8/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Exim	vers:unknown/*	—	—
Open Source	vers:unknown/*	—	—

Aliases

CVE-2026-45185

References

advisory

Browse GCVE Records

76,203 records in the GCVE database · Updated August 6, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON