CVE-2026-19662

CVE-2026-19662 is a use-after-free bug in BIND 9's qpcache (query performance cache) component, specifically in the NOQNAME proof handling. An attacker operating an authoritative server for a DNSSEC-signed zone can induce a recursive resolver to abort by sending crafted answers in a particular se...

CVE-2026-19667 Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

CVE-2026-19667 Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

EUVD-2026-80742

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

CVE-2026-19667

CVE-2026-19667 is a remote assertion failure in the BIND 9 named daemon, caused by a 16-bit length truncation in dns_ncache_add(). When an attacker-controlled authoritative server returns a negative answer of exactly 65536 bytes , the negative cache entry is stored as 0 bytes; reading that entry ...

CVE-2026-81736 Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through...

CVE-2026-81736 Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through...

CVE-2026-81736

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through...

EUVD-2026-80740

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through...

CVE-2026-81736

CVE-2026-81736 is a remote CPU denial of service in ISC BIND 9 . When a resolver has cached a tree of SVCB/HTTPS AliasMode records and receives a query for the root of that tree, it spends disproportionate CPU time constructing the response, leading to availability impact. Affected versions are 9...

Security Bulletin: Multiple vulnerabilities impact AIX due to ISC BIND

Summary Vulnerabilities in ISC BIND could cause: Allowing forged authenticated NXDOMAIN responses CVE-2026-10723, Denial of service CVE-2026-10822, CVE-2026-11331, CVE-2026-11622, CVE-2026-12617, CVE-2026-13204, DNS cache poisoning CVE-2026-11721, CVE-2026-13321. AIX uses ISC BIND as part of its...

CVE-2026-3888-snap-confine-systemd-tmpfiles-LPE

CVE-2026-3888 — snap-confine / systemd-tmpfiles Escalada de Privilegios Local Escalada de privilegios local desde un usuario sin privilegios hasta root completo en Ubuntu Desktop 24.04+ explotando una condición de carrera TOCTOU entre snap-confine y systemd-tmpfiles. Se proporcionan dos variantes...

CVE-2026-90020

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

docker_cve-2015-2925

Docker + CVE-2015-2925 = escapando de --volume Vulnerabilidad reciente en Linux conocida desde hace aproximadamente medio año varios meses de forma pública hizo posible escapar de los bind mounts. En particular, en el caso de Docker es posible escapar desde el interior del directorio montado...

EUVD-2026-80628

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

CVE-2026-90020 USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

Multiple vulnerabilities impact AIX due to ISC BIND (CVE-2026-10723 CVE-2026-10822 CVE-2026-11331 CVE-2026-11622 CVE-2026-11721 CVE-2026-12617 CVE-2026-13204 CVE-2026-13321)

IBM SECURITY ADVISORY First Issued: Wed Sep 16 01:36:11 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/bindadvisory31.asc Security Bulletin: Multiple vulnerabilities impact AIX due to ISC BIND CVE-2026-10723, CVE-2026-10822,...

EUVD-2026-80045

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by...

Linux Distros Unpatched Vulnerability : CVE-2026-77119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answ...

Linux Distros Unpatched Vulnerability : CVE-2026-76163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If BIND is loaded with a named.conf file that contains no global options block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure...