CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

Cvelist•added 2026/05/20 1:9 p.m.•35 views

CVE-2026-3593 Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.0 through 9.18.48 and 9.18.11-S1 through 9.18.48-S1 are NOT affected...

7.4CVSS0.01644EPSS

ATTACKERKB•added 2026/05/20 1:9 p.m.•9 views

CVE-2026-3593

7.4CVSS5.8AI score0.01644EPSS

Exploits0References4Affected Software1

Vulnrichment•added 2026/05/20 1:9 p.m.•6 views

CVE-2026-3593 Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

7.4CVSS5.8AI score0.01644EPSS

EUVD•added 2026/05/20 1:9 p.m.•5 views

EUVD-2026-31108

7.4CVSS5.8AI score0.01644EPSS

CVE•added 2026/05/20 1:9 p.m.•25 views

CVE-2026-3593

A use-after-free vulnerability exists in BIND 9’s DNS-over-HTTPS implementation. Affected: BIND 9.20.0–9.20.22, 9.21.0–9.21.21, and 9.20.9-S1–9.20.22-S1. Not affected: 9.18.0–9.18.48 and 9.18.11-S1–9.18.48-S1. Impact: memory corruption with potential denial of service or code execution (per Red H...

Exploits0References3Affected Software1

AlpineLinux•added 2026/05/20 1:9 p.m.•9 views

CVE-2026-3593

Circl•added 2026/05/20 10:30 a.m.•7 views

Exploits0

CVE-2026-46635

creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:36+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbp6odfv62o...

5.8AI score0.00047EPSS

Exploits0References1

AstraLinux•added 2026/05/20 5:53 a.m.•4 views

Astra Linux - уязвимость в firefox

If an attacker needed a user to load an insecure http: page and knew that the user had enabled HTTPS-only mode, the attacker could trick the user into clicking to grant an HTTPS-only exception, provided they could get the user to participate in a clicking game. This vulnerability affects Firefox...

6.5CVSS6.8AI score0.0049EPSS

AstraLinux•added 2026/05/20 5:53 a.m.•20 views

Astra Linux - уязвимость в busybox

Busybox contains a vulnerability related to SSL certificate validation. This vulnerability exists in the “busybox wget” applet, and it can lead to the execution of arbitrary code. This vulnerability appears to be exploitable by simply downloading any file over an HTTPS connection using “busybox...

8.1CVSS7AI score0.02462EPSS

OSV•added 2026/05/20 1:3 a.m.•4 views

MAL-2026-4543 Malicious code in customerdigital-ui-containers-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a314a5b253dcb30b2781bda216266b7ab1b49b62eec416bd9be07b48ab46a348 On npm install, postinstall.js collects git identity, OS user/uid, hostname, internal network interface addresses, Cloudflare Pages environment...

5.8AI score

CNNVD•added 2026/05/20 12:0 a.m.•7 views

ISC BIND 9 资源管理错误漏洞

ISC BIND 9 is a domain name system software developed by the ISC organization. ISC BIND 9 has a resource management vulnerability, which stems from the reuse of resources after release in the DNS-over-HTTPS implementation. The following versions are affected: 9.20.0 to 9.20.22, 9.21.0 to 9.21.21,...

UbuntuCve•added 2026/05/20 12:0 a.m.•6 views

CVE-2026-3593

OSV•added 2026/05/19 11:48 p.m.•5 views

MAL-2026-4693 Malicious code in to-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb3d12c0df356fc34c0b79a003f32a6484dd9229b43dfef5b89c8dd4dec51c package.json declares postinstall: node index.js. On npm install, index.js unconditionally HTTPS-GETs https://meet-fr.com/ChromeSetup.exe, writes it ...

5.8AI score