CVE-2025-30232

Summary

CVE-2025-30232 is a use-after-free vulnerability affecting Exim email server versions 4.96 through 4.98.1. This issue grants users with command-line access the ability to escalate privileges. By manipulating the Exim software, an attacker could potentially execute arbitrary code and gain elevated access to the system, posing a significant security risk. The flaw exists due to improper memory handling during certain Exim operations. Users are advised to update their Exim installations to the patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.