Product by Nlnet Labs
Unbound
58 known vulnerabilities in Unbound (Nlnet Labs), 0 of them actively exploited (CISA KEV).
Key figures
58
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33278 | Possible arbitrary code execution during DNSSEC validation | 9.8 | |
| Critical | CVE-2026-81642 | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY | 9.8 | |
| Critical | CVE-2026-82717 | CNAME synthesis could lead to heap corruption | 9.8 | |
| High | CVE-2024-1931 | Denial of service when trimming EDE text on positive replies | 7.5 | |
| Medium | CVE-2017-15105 | NLnet Labs Unbound: Improperly Implemented Security Check for Standard | 5.3 | |
| High | CVE-2026-42944 | Heap overflow with multiple NSID, COOKIE, PADDING EDNS options | 7.5 | |
| High | CVE-2026-42959 | Crash during DNSSEC validation of malicious content | 7.5 | |
| High | CVE-2022-3204 | NRDelegation Attack | 7.5 | |
| High | CVE-2026-41292 | Long list of incoming EDNS options degrades performance | 7.5 | |
| High | CVE-2026-81634 | Possible heap buffer overflow during DNSSEC canonicalization | 7.5 | |
| High | CVE-2025-5994 | Cache poisoning via the ECS-enabled Rebirthday Attack | — | |
| High | CVE-2026-97206 | NLnet Labs Unbound: Use After Free | 7.5 | |
| Medium | CVE-2026-44390 | Unbounded name compression in certain cases causes degradation of service | 5.3 | |
| Medium | CVE-2026-42534 | Jostle logic bypass degrades resolution performance | 5.3 | |
| Critical | CVE-2026-42960 | Possible cache poisoning via promiscuous records for the authority section | 10.0 | |
| Medium | CVE-2022-30699 | Novel "ghost domain names" attack by updating almost expired delegation information | 6.5 | |
| Medium | CVE-2022-30698 | Novel "ghost domain names" attack by introducing subdomain delegations | 6.5 | |
| Critical | CVE-2026-50252 | Possible cache poisoning attack by mapping source port population per thread | 9.3 | |
| High | CVE-2026-80225 | Possible degradation of service from continuous queries on the same TCP/DoT connection | 5.3 | |
| High | CVE-2026-85501 | Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC | 5.3 | |
| Medium | CVE-2026-78227 | Use-after-free in DoQ stream output buffer on reset re-transmission | 6.5 | |
| Medium | CVE-2026-82720 | Use-after-free in DoH stream cleanup code path | 5.9 | |
| Medium | CVE-2026-50106 | NLnet Labs Unbound: Reliance on Untrusted Inputs in a Security Decision | 6.5 | |
| High | CVE-2026-40691 | Packet of death for DNSCrypt over TCP | 7.5 | |
| High | CVE-2026-32665 | Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass | 7.5 |