Sign inStart freeBook a demo

Isc vulnerabilities1 known to be exploited.

Vendor1 known exploited
The short answer

Isc has 227 published vulnerabilities across 8 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Bind, with 173. If you run Isc software, patch the exploited flaws first.

See the exploited flaws

The most recent Isc flaw added to the known-exploited list is CVE-2015-5477, on 8 October 2026. We keep watching the known-exploited list.

Products

Which Isc products have the most vulnerabilities?

Bind leads with 173 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Bind173
  2. DHCP25
  3. Inn14
  4. Dhcpd8
  5. Kea4
  6. DHCP Client2
  7. Stork1
  8. Dnsco Bind1
Published vulnerabilities
Known exploited

Which Isc vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 7.8
    CVE-2015-5477HighKnown exploited
    ISC BIND Data Processing Errors Vulnerability

    ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

    Chance of use>99%Known exploited since8 Oct 2026
Exploit likelihood

Which Isc flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. >99%
    CVE-2023-50387High

    Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue.

    CVSS7.5Published14 Feb 2024
  2. >99%
    CVE-2015-5477HighKnown exploited

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

    CVSS7.8Published29 Jul 2015
  3. 93%
    CVE-2020-8617Medium

    Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server.

    CVSS5.9Published19 May 2020
  4. 89%
    CVE-2016-2776High

    buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion...

    CVSS7.5Published28 Sep 2016
  5. 85%
    CVE-2011-0997High

    dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained...

    CVSS7.5Published8 Apr 2011
  6. 83%
    CVE-2015-8605Medium

    ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.

    CVSS6.5Published14 Jan 2016
  7. 82%
    CVE-2021-25216Critical

    In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17...

    CVSS9.8Published29 Apr 2021
  8. 76%
    CVE-2010-2156Medium

    ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit) via a zero-length client ID.

    CVSS5.0Published7 Jun 2010
  9. 74%
    CVE-2016-2774Medium

    ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or...

    CVSS5.9Published9 Mar 2016
Every product

All Isc products we track.

8 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

Precursor Intelligence

Running Isc? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 227 published vulnerabilities across 8 products and 427 versions from Isc. The most recent Isc flaw added to the known-exploited list is CVE-2015-5477, on 8 October 2026.

1 Isc vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2015-5477. The full list is on this page.

Bind, with 173 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Isc products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring