Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-3593 — ISC BIND 9 DNS-over-HTTPS HTTP/2 SETTINGS Use-After-Free

aretiq.ai | research | CVE-2026-3593 | #vulnerability-research | #denial-of-service | #use-after-free | #cve-2026-3593 | #bind9 | #dns-over-https

Summary

CVE-2026-3593: a use-after-free in BIND 9's DoH implementation—freed response buffers are read during HTTP/2 SETTINGS floods, crashing ASAN builds; fixed in 9.20.23 and 9.21.22.
CVE
CVE-2026-3593
Published
Collected

original ↗

Related coverage

research · starlabs.sg
When AI Makes 0-Days Feel Like N-Days
The author used AI to find a UAF bug in Linux net/sched and built an LPE exploit for CentOS 9 at TyphoonPwn 2026. AI sped things up, but deep subsystem knowledge still mattered.
research · aretiq.ai
CVE-2026-23412 — Linux Kernel Netfilter BPF Hook Use-After-Free LPE
CVE-2026-23412: a use-after-free in Linux's BPF netfilter links—synchronous deallocation racing hook enumeration—enables local privilege escalation via heap spray; fixed in 7.0-rc5.
research · aretiq.ai
CVE-2026-41089 — Microsoft Windows Netlogon BuildSamLogonResponse Stack-based Buffer Overflow RCE
CVE-2026-41089: a stack-based buffer overflow in Windows Netlogon's CLDAP DC locator response can crash LSASS and force domain controller reboots, depending on DNS naming length.
research · bughunters.google.com
Google's PageBreak Project – Real-World Findings
This post provides a technical deep dive into specific, real-world vulnerabilities discovered by Google's PageBreak scanner
research · theori.io
Cleanly Escaping the Chrome Sandbox
Theori's walkthrough of Issue 1062091, a use-after-free in Chrome's browser process reached via Mojo IPC, turned into a sandbox escape for Chrome and Chromium-based Edge, with full exploit details.
research · swarm.ptsecurity.com
Hack the Elephant One Bite at a Time: NUL byte SQL Injection in pdo_firebird and NULL Pointer Dereference in PDO via pdo_pgsql
Positive Technologies details two PHP PDO flaws: CVE-2025-14179, SQL injection in pdo_firebird via NUL bytes in quoted strings, and CVE-2025-14180, a NULL pointer dereference in PDO quoting.
back