Four CVEs spanning ISC BIND 9 and ISC Kea are present in this period’s broader batch under improper input validation (CWE-20). No active exploitation evidence was present in source data; however, BIND 9 vulnerabilities in critical DNS infrastructure have historically attracted rapid weaponization and should be prioritized in environments where authoritative or recursive DNS is exposed. Verify affected versions and patches against the official ISC security advisories at kb.isc.org.