# Isc BIND vulnerabilities Source: https://junglewise.ai/threats/technologies/bind Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/bind.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 23 vulnerabilities in Isc BIND: 0 in the last 7 days and 18 in the last 90 days, 2 of them critical and 1 exploited in the wild. The most recent, CVE-2026-96888, was published on 21 October 2026. 3 vulnerabilities in the last four weeks, down 80% on the four before (15). 0 critical against 1, 0 exploited in the wild against 1. ## Counts - Last 7 days: 0 - Last 30 days: 3 - Last 90 days: 18 - All time: 23 (2 critical, 1 exploited in the wild) ## About Isc BIND DNS server software that translates domain names to IP addresses and manages domain name system records. ## Latest Isc BIND vulnerabilities - [CVE-2026-96888: BIND assertion failure with redirect zone and qname-minimization](https://junglewise.ai/threats/cve-2026-96888-a-bind-resolver-that-is-configured-with-both-a-redirect-zone-and) (high, CVSS 7.5, published 21 Oct 2026) - [CVE-2026-94300: BIND named GSS-TSIG replay heap corruption](https://junglewise.ai/threats/cve-2026-94300-replaying-gss-tsig-signed-udp-messages-can-result-in-memory) (high, CVSS 8.1, published 21 Oct 2026) - [CVE-2026-19630: ISC BIND resolver DNS message processing denial of service](https://junglewise.ai/threats/cve-2026-19630-in-a-bind-resolver-inbound-dns-protocol-messages-with-a) (high, CVSS 7.5, published 21 Oct 2026) - [CVE-2015-5477: ISC BIND denial of service via TKEY queries](https://junglewise.ai/threats/cve-2015-5477-isc-bind-data-processing-errors-vulnerability) (critical, exploited in the wild, published 8 Oct 2026) - [CVE-2026-80274: BIND resolver crash on DNSSEC-signed wildcard with NSEC mismatch](https://junglewise.ai/threats/cve-2026-80274-bind-resolver-crash-on-dnssec-signed-wildcard-with-nsec-mismatch) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-77119: ISC BIND DNSSEC validation bypass with NSEC3 forgery](https://junglewise.ai/threats/cve-2026-77119-isc-bind-dnssec-validation-bypass-with-nsec3-forgery) (medium, CVSS 5.9, published 16 Sep 2026) - [CVE-2026-76163: ISC BIND assertion failure in TKEY query handling](https://junglewise.ai/threats/cve-2026-76163-isc-bind-assertion-failure-in-tkey-query-handling) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-75029: ISC BIND DNS cache memory exhaustion in query responses](https://junglewise.ai/threats/cve-2026-75029-isc-bind-dns-cache-memory-exhaustion-in-query-responses) (medium, CVSS 5.3, published 16 Sep 2026) - [CVE-2026-19668: ISC BIND recursive resolver excessive resource consumption on invalid DNSSEC records](https://junglewise.ai/threats/cve-2026-19668-isc-bind-recursive-resolver-excessive-resource-consumption-on) (medium, CVSS 5.3, published 16 Sep 2026) - [CVE-2026-19666: ISC BIND dns64 malformed answer crash](https://junglewise.ai/threats/cve-2026-19666-isc-bind-dns64-malformed-answer-crash) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-19033: ISC BIND named TSIG signature validation bypass in zone transfers](https://junglewise.ai/threats/cve-2026-19033-isc-bind-named-tsig-signature-validation-bypass-in-zone-transfers) (medium, CVSS 6.5, published 16 Sep 2026) - [CVE-2026-81736: ISC BIND DNS resolver high CPU consumption via cached SVCB/HTTPS AliasMode records](https://junglewise.ai/threats/cve-2026-81736-isc-bind-dns-resolver-high-cpu-consumption-via-cached-svcb-https) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-81563: ISC BIND resolver resource exhaustion via SVCB/HTTPS AliasMode](https://junglewise.ai/threats/cve-2026-81563-isc-bind-resolver-resource-exhaustion-via-svcb-https-aliasmode) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-78301: ISC BIND named zone parsing vulnerability](https://junglewise.ai/threats/cve-2026-78301-isc-bind-named-zone-parsing-vulnerability) (medium, CVSS 5.8, published 16 Sep 2026) - [CVE-2026-77692: ISC BIND DNS service denial of service via crafted DNS-over-HTTPS request](https://junglewise.ai/threats/cve-2026-77692-isc-bind-dns-service-denial-of-service-via-crafted-dns-over-https) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-19941: ISC BIND named NSEC wildcard masking vulnerability](https://junglewise.ai/threats/cve-2026-19941-isc-bind-named-nsec-wildcard-masking-vulnerability) (medium, CVSS 5.9, published 16 Sep 2026) - [CVE-2026-19667: ISC BIND named negative cache denial of service](https://junglewise.ai/threats/cve-2026-19667-isc-bind-named-negative-cache-denial-of-service) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-19662: ISC BIND named resolver use-after-free denial of service](https://junglewise.ai/threats/cve-2026-19662-isc-bind-named-resolver-use-after-free-denial-of-service) (medium, CVSS 5.9, published 16 Sep 2026) - [CVE-1999-1499: ISC BIND symlink vulnerability in named_dump.db and named.stats](https://junglewise.ai/threats/cve-1999-1499-isc-bind-symlink-vulnerability-in-named-dump-db-and-named-stats) (low, CVSS 2.1, published 10 Apr 1998) - [CVE-1999-0009: ISC BIND buffer overflow in inverse query handling](https://junglewise.ai/threats/cve-1999-0009-isc-bind-buffer-overflow-in-inverse-query-handling) (critical, CVSS 10, published 8 Apr 1998) - [CVE-1999-0011: ISC BIND Denial of Service via CNAME and zone transfer](https://junglewise.ai/threats/cve-1999-0011-isc-bind-denial-of-service-via-cname-and-zone-transfer) (medium, CVSS 5.4, published 8 Apr 1998) - [CVE-1999-0024: ISC BIND DNS cache poisoning via predictable query IDs](https://junglewise.ai/threats/cve-1999-0024-isc-bind-dns-cache-poisoning-via-predictable-query-ids) (medium, CVSS 5, published 13 Aug 1997) - [CVE-1999-0184: ISC BIND unauthorized DNS record modification via dynamic updates](https://junglewise.ai/threats/cve-1999-0184-isc-bind-unauthorized-dns-record-modification-via-dynamic-updates) (medium, CVSS 6.4, published 1 Jul 1997) ## Most severe Isc BIND vulnerabilities - [CVE-2015-5477: ISC BIND denial of service via TKEY queries](https://junglewise.ai/threats/cve-2015-5477-isc-bind-data-processing-errors-vulnerability) (critical, exploited in the wild, published 8 Oct 2026) - [CVE-1999-0009: ISC BIND buffer overflow in inverse query handling](https://junglewise.ai/threats/cve-1999-0009-isc-bind-buffer-overflow-in-inverse-query-handling) (critical, CVSS 10, published 8 Apr 1998) - [CVE-2026-94300: BIND named GSS-TSIG replay heap corruption](https://junglewise.ai/threats/cve-2026-94300-replaying-gss-tsig-signed-udp-messages-can-result-in-memory) (high, CVSS 8.1, published 21 Oct 2026) - [CVE-2026-81736: ISC BIND DNS resolver high CPU consumption via cached SVCB/HTTPS AliasMode records](https://junglewise.ai/threats/cve-2026-81736-isc-bind-dns-resolver-high-cpu-consumption-via-cached-svcb-https) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-80274: BIND resolver crash on DNSSEC-signed wildcard with NSEC mismatch](https://junglewise.ai/threats/cve-2026-80274-bind-resolver-crash-on-dnssec-signed-wildcard-with-nsec-mismatch) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-76163: ISC BIND assertion failure in TKEY query handling](https://junglewise.ai/threats/cve-2026-76163-isc-bind-assertion-failure-in-tkey-query-handling) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-81563: ISC BIND resolver resource exhaustion via SVCB/HTTPS AliasMode](https://junglewise.ai/threats/cve-2026-81563-isc-bind-resolver-resource-exhaustion-via-svcb-https-aliasmode) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-77692: ISC BIND DNS service denial of service via crafted DNS-over-HTTPS request](https://junglewise.ai/threats/cve-2026-77692-isc-bind-dns-service-denial-of-service-via-crafted-dns-over-https) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-19666: ISC BIND dns64 malformed answer crash](https://junglewise.ai/threats/cve-2026-19666-isc-bind-dns64-malformed-answer-crash) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-19667: ISC BIND named negative cache denial of service](https://junglewise.ai/threats/cve-2026-19667-isc-bind-named-negative-cache-denial-of-service) (high, CVSS 7.5, published 16 Sep 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, down 80% on the four before (15). 0 critical against 1, 0 exploited in the wild against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 14 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 1 | 1 | 1 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 3 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Isc technologies - [Isc BIND 9](https://junglewise.ai/threats/technologies/bind-9): 21 vulnerabilities - [Isc BIND 9 Supported Preview Edition](https://junglewise.ai/threats/technologies/bind-9-supported-preview-edition): 5 vulnerabilities - [Isc InterNetNews](https://junglewise.ai/threats/technologies/internetnews): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Isc BIND vulnerabilities", https://junglewise.ai/threats/technologies/bind, 9 November 2026.