CVE-2026-45185
Published: 12 May 2026
Summary
CVE-2026-45185 is a critical-severity Use After Free (CWE-416) vulnerability in Exim (inferred from references). Its CVSS base score is 9.8 (Critical).
Operationally, it is not currently listed in the CISA KEV catalog.
Threat & Defense Details
Likely Mitigating ControlsAI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Use-after-free exploits that achieve arbitrary code execution are blocked or significantly hardened by non-executable pages and ASLR.
NVD Description
Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on…
more
the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)