Vendor
Internet Systems Consortium
42 known vulnerabilities in products by Internet Systems Consortium, 0 of them actively exploited (CISA KEV).
Key figures
42
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-77692 | Unauthenticated remote crash of named via a single DoH SIG(0) request | 7.5 | |
| High | CVE-2025-13878 | Malformed BRID/HHIT records can cause named to terminate unexpectedly | 7.5 | |
| High | CVE-2022-3736 | ISC BIND 9: security vulnerability | 7.5 | |
| High | CVE-2022-3488 | ISC BIND 9: security vulnerability | 7.5 | |
| High | CVE-2022-3924 | ISC BIND 9: security vulnerability | 7.5 | |
| High | CVE-2022-3094 | An UPDATE message flood may cause named to exhaust all available memory | 7.5 | |
| High | CVE-2026-5946 | Invalid handling of CLASS != IN | 7.5 | |
| High | CVE-2026-94300 | Concurrent GSS-TSIG messages corrupt memory | 8.1 | |
| High | CVE-2026-1519 | Excessive NSEC3 iterations cause high CPU load during insecure delegation validation | 7.5 | |
| Critical | CVE-2026-3593 | Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation | 7.4 | |
| High | CVE-2026-5947 | SIG(0) validation during query flood may lead to undefined behavior | 7.5 | |
| High | CVE-2026-3039 | BIND 9 server memory exhaustion during GSS-API TKEY negotiation | 7.5 | |
| High | CVE-2026-19667 | Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` | 7.5 | |
| High | CVE-2026-76163 | named aborts on a TKEY query when the user configuration has no global options statement | 7.5 | |
| High | CVE-2026-19666 | Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path | 7.5 | |
| High | CVE-2026-80274 | Validating resolver can abort while caching a mismatched NOQNAME proof | 7.5 | |
| High | CVE-2026-81736 | Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees | 7.5 | |
| High | CVE-2026-81563 | SVCB AliasMode additional-data error leaks qpcache references | 7.5 | |
| High | CVE-2026-11605 | Unnecessary validation of DNSSEC signed records | 7.5 | |
| High | CVE-2026-96888 | Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization | 7.5 | |
| High | CVE-2026-97313 | Specific RPZ configurations and query patterns may result in an unexpected exit | 7.5 | |
| High | CVE-2026-19630 | Amplified resource exhaustion in inbound message processing | 7.5 | |
| High | CVE-2026-3104 | Memory leak in code preparing DNSSEC proofs of non-existence | 7.5 | |
| High | CVE-2026-11622 | Potential memory usage beyond configured limits | 7.5 | |
| High | CVE-2026-12617 | Record ordering based unexpected exit with CNAME or DNAME | 7.5 |
News
Products
| Bind | 42 | 0 |
| Bind Supported Preview Edition | 13 | 0 |