IISC

Products

Exploited and recent CVEs

• CVE-2026-97313 High 7.5 Specific RPZ configurations and query patterns may result in an unexpected exit 0.4%
• CVE-2026-96888 High 7.5 Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization 0.5%
• CVE-2026-94300 High 8.1 Concurrent GSS-TSIG messages corrupt memory 1.0%
• CVE-2026-19630 High 7.5 Amplified resource exhaustion in inbound message processing 0.4%
• CVE-2026-77119 Medium 5.9 NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets 0.2%
• CVE-2026-75029 Medium 5.3 Message parser retains every identical singleton RDATA, enabling wire-to-work amplification 0.5%
• CVE-2026-19668 Medium 5.3 Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching 0.5%
• CVE-2026-19033 Medium 6.5 Unauthenticated IXFR deltas are applied to the live zone before TSIG verification 0.2%
• CVE-2026-80274 High 7.5 Validating resolver can abort while caching a mismatched NOQNAME proof 0.6%
• CVE-2026-76163 High 7.5 named aborts on a TKEY query when the user configuration has no global options statement 0.6%
• CVE-2026-19666 High 7.5 Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path 0.6%
• CVE-2026-81563 High 7.5 SVCB AliasMode additional-data error leaks qpcache references 0.6%
• CVE-2026-78301 Medium 5.8 Out-of-zone database nodes can become authoritative zone cuts 0.2%
• CVE-2026-77692 High 7.5 Unauthenticated remote crash of named via a single DoH SIG(0) request 6.6%
• CVE-2026-19941 Medium 5.9 checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof 0.2%
• CVE-2026-19662 Medium 5.9 qpcache NOQNAME proof use-after-free crashes recursive resolver 0.5%
• CVE-2026-19667 High 7.5 Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` 0.6%
• CVE-2026-81736 High 7.5 Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees 0.6%
• CVE-2026-13321 High 8.6 DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field 0.2%
• CVE-2026-13204 High 7.5 Unexpected exit in certain situations with NSEC and NSEC3 both present 0.5%
• CVE-2026-12617 High 7.5 Record ordering based unexpected exit with CNAME or DNAME 0.5%
• CVE-2026-11721 High 7.5 Cache poisoning possible with label count discrepancy, RRSIG, and wildcards 0.4%
• CVE-2026-11622 High 7.5 Potential memory usage beyond configured limits 0.5%
• CVE-2026-11605 High 7.5 Unnecessary validation of DNSSEC signed records 0.7%
• CVE-2026-11331 High 7.5 Potential wildcard CNAME RPZ policy bypass 0.4%
• CVE-2026-10822 Medium 6.5 Key Record using PRIVATEDNS algorithm may lead to unexpected exit 0.4%
• CVE-2026-10723 Medium 6.8 Incorrect acceptance of NSEC3 records 0.3%
• CVE-2026-5950 Medium 5.3 Unbounded resend loop in BIND 9 resolver 0.7%
• CVE-2026-5947 High 7.5 SIG(0) validation during query flood may lead to undefined behavior 1.4%
• CVE-2026-5946 High 7.5 Invalid handling of CLASS != IN 1.9%