A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges.
{
"cna_assigner": "mitre",
"unresolved_ranges": [
{
"source": "AFFECTED_FIELD",
"extracted_events": [
{
"introduced": "4.96"
},
{
"fixed": "4.98.2"
}
]
},
{
"extracted_events": [
{
"introduced": "4.96"
},
{
"fixed": "4.98.2"
}
],
"source": "CPE_FIELD"
},
{
"extracted_events": [
{
"introduced": "4.96"
},
{
"fixed": "4.98.1"
}
],
"source": "DESCRIPTION"
}
],
"cwe_ids": [
"CWE-416"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/30xxx/CVE-2025-30232.json"
}