CVE security advisories and vulnerability history for bind9 by isc-projects.
90
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
5
Public exploits
PoC or exploit code
7.0
Avg CVSS
2016–2026
Last updated
Overview
isc-projects bind9 has 90 published CVE records since 2016, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting isc-projects bind9, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of isc-projects bind9's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical2
High60
Medium28
Low0
In CISA’s Known Exploited Vulnerabilities catalog
0
None of isc-projects bind9's CVEs are currently listed in CISA's KEV catalog.
Public exploits
5
5 of isc-projects bind9's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every isc-projects bind9 version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about isc-projects bind9 vulnerabilities.
How many CVEs does isc-projects bind9 have?
isc-projects bind9 has 90 published CVE records since 2016.
How many isc-projects bind9 CVEs are in CISA KEV?
None of isc-projects bind9's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for isc-projects bind9 vulnerabilities?
Yes — 5 of isc-projects bind9's CVEs have a known public exploit.
Which versions of isc-projects bind9 are affected?
1,123 distinct isc-projects bind9 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in isc-projects bind9 CVEs?
isc-projects bind9's CVEs most often map to these CWE weakness types: CWE-617 (Reachable Assertion), CWE-401 (Missing Release of Memory after Effective Lifetime), CWE-400 (Uncontrolled Resource Consumption), CWE-20 (Improper Input Validation).
How many critical isc-projects bind9 vulnerabilities are there?
isc-projects bind9 has 2 critical and 60 high-severity CVEs.
What is the average severity of isc-projects bind9 CVEs?
The average CVSS base score across isc-projects bind9's scored CVEs is 7.0.
