postfix has 1 CVE on record. The median CVSS is 3.7 (low).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 3.7
Publish → KEV: —
Last 90 days: 0 prev 1

Weakness classes

CWE-193 1

Products

postfix 1

Follow postfix:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-43964Low· 3.7Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.20

postfix vulnerabilities

CVEs affecting postfix, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-43964Low· 3.7

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.

▾ Sunlitpostfix · postfixEPSS 0.51%via NVD

postfix vulnerabilities (CVEs) · VulnSea