Search: CVE-2026-19662

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.9	EPSS 0.5%	CVE-2026-19662ISC BIND 9 · Use After Free Medium5.9EPSS 0.5%2026-09-16CVE Database V5CVE-2026-19662 CVE-2026-19662 is a use-after-free vulnerability in ISC BIND 9 DNS resolver that can cause the service to abort. It occurs when multiple DNS queries for a DNSSEC-signed zone controlled by an attacker are sent, and the attacker responds with a crafted sequence of answers in a specific order and timing. This vulnerability affects several BIND 9 versions including 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, and their S1 variants. The CVSS score is 5.9, indicating medium severity, with impact limited to availability. There are no known exploits in the wild and no patch information is provided in the input data. EPSS 0.5%Vulnerability CWE-416 #microsoft-security-response-ce	CVE Database V5	2026-09-16

Page 1 of 1 · 6 duplicate CVE records merged