CVE-2026-13321高 8.6The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone.
This issue affect…
CVE-2026-13204高 7.5If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these type…
CVE-2026-12617高 7.5The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A reco…
CVE-2026-11721高 7.5It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRS…
CVE-2026-11622高 7.5A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The …