ISC BIND 9 vulnerabilities

CVEs per yearBy the year they were published

1. 20195
2. 20198
3. 20199
4. 20191
5. 20234
6. 202410
7. 20257
8. 20256
9. 202637

Newest CVEs

• CVE-2026-97313

  Specific RPZ configurations and query patterns may result in an unexpected exit

  ISC · BIND 9

  High7.5
• CVE-2026-96888

  Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization

  ISC · BIND 9

  High7.5
• CVE-2026-94300

  Concurrent GSS-TSIG messages corrupt memory

  ISC · BIND 9

  High8.1
• CVE-2026-19630

  Amplified resource exhaustion in inbound message processing

  ISC · BIND 9

  High7.5
• CVE-2026-77119

  NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets

  ISC · BIND 9

  Medium5.9
• CVE-2026-75029

  Message parser retains every identical singleton RDATA, enabling wire-to-work amplification

  ISC · BIND 9

  Medium5.3
• CVE-2026-19668

  Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching

  ISC · BIND 9

  Medium5.3
• CVE-2026-19033

  Unauthenticated IXFR deltas are applied to the live zone before TSIG verification

  ISC · BIND 9

  Medium6.5
• CVE-2026-80274

  Validating resolver can abort while caching a mismatched NOQNAME proof

  ISC · BIND 9

  High7.5
• CVE-2026-76163

  named aborts on a TKEY query when the user configuration has no global options statement

  ISC · BIND 9

  High7.5