Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-3593

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-3593.

Coverage Span: 2026-06-05
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-3593 — ISC BIND 9 DNS-over-HTTPS HTTP/2 SETTINGS Use-After-Free

CVE-2026-3593: a use-after-free in BIND 9's DoH implementation—freed response buffers are read during HTTP/2 SETTINGS floods, crashing ASAN builds; fixed in 9.20.23 and 9.21.22.