CVE-2025-30232

low-risk
Published 2025-03-28

A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges.

Do I need to act?

-
0.03% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.1/10 High
LOCAL / HIGH complexity

Affected Products (1)

Affected Vendors

Exim

References (2)

Vendor Advisory https://www.exim.org/static/doc/security/CVE-2025-30232.txt
Mailing List http://www.openwall.com/lists/oss-security/2025/03/26/1
26
/ 100
low-risk
Severity 21/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal