ISC BIND 9 vulnerabilities

CVEs per yearBy the year they were published

1. 201923
2. 20239
3. 20249
4. 20258
5. 202638

Newest CVEs

• CVE-2026-97313

  Specific RPZ configurations and query patterns may result in an unexpected exit

  ISC · BIND 9

  High7.5
• CVE-2026-96888

  Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization

  ISC · BIND 9

  High7.5
• CVE-2026-94300

  Concurrent GSS-TSIG messages corrupt memory

  ISC · BIND 9

  High8.1
• CVE-2026-19630

  Amplified resource exhaustion in inbound message processing

  ISC · BIND 9

  High7.5
• CVE-2026-77119

  NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets

  ISC · BIND 9

  Medium5.9
• CVE-2026-75029

  Message parser retains every identical singleton RDATA, enabling wire-to-work amplification

  ISC · BIND 9

  Medium5.3
• CVE-2026-19668

  Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching

  ISC · BIND 9

  Medium5.3
• CVE-2026-19033

  Unauthenticated IXFR deltas are applied to the live zone before TSIG verification

  ISC · BIND 9

  Medium6.5
• CVE-2026-80274

  Validating resolver can abort while caching a mismatched NOQNAME proof

  ISC · BIND 9

  High7.5
• CVE-2026-76163

  named aborts on a TKEY query when the user configuration has no global options statement

  ISC · BIND 9

  High7.5