Threats tagged 'ghsa-x8x4-4g6x-cx4h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-40687In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an Medium4.82026-05-01GCVE DatabaseCVE-2026-40687 A vulnerability in Exim before version 4.99.2 involving the SPA authentication driver can cause an out-of-bounds write or leak data from uninitialized heap memory when interacting with a malicious SPA resource. This may crash the connection or expose sensitive data. Report on CVE-2026-40687 Vulnerability CWE-909 #ghsa-x8x4-4g6x-cx4h	GCVE Database	2026-05-01

Page 1 of 1