# Isc vulnerabilities

> Isc has 227 published vulnerabilities across 8 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Bind, with 173. If you run Isc software, patch the exploited flaws first.

Canonical page: https://www.precursorintelligence.com/vendors/isc

## At a glance

- **Published vulnerabilities:** 227
- **Known to be exploited:** 1
- **Products:** 8
- **Versions:** 427
- **Most recently added to the known-exploited list:** [CVE-2015-5477](https://www.precursorintelligence.com/what-is/cve-2015-5477), 8 October 2026. We keep watching the list.

## Which Isc products have the most vulnerabilities?

- [Bind](https://www.precursorintelligence.com/product/isc/bind): 173 published vulnerabilities, 320 versions
- [DHCP](https://www.precursorintelligence.com/product/isc/dhcp): 25 published vulnerabilities, 45 versions
- [Inn](https://www.precursorintelligence.com/product/isc/inn): 14 published vulnerabilities, 16 versions
- [Dhcpd](https://www.precursorintelligence.com/product/isc/dhcpd): 8 published vulnerabilities, 9 versions
- [Kea](https://www.precursorintelligence.com/product/isc/kea): 4 published vulnerabilities, 29 versions
- [DHCP Client](https://www.precursorintelligence.com/product/isc/dhcp_client): 2 published vulnerabilities, 3 versions
- [Stork](https://www.precursorintelligence.com/product/isc/stork): 1 published vulnerability, 3 versions
- [Dnsco Bind](https://www.precursorintelligence.com/product/isc/dnsco_bind): 1 published vulnerability, 2 versions

Each product page lists its own known-exploited flaws.

## Which Isc vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2015-5477](https://www.precursorintelligence.com/what-is/cve-2015-5477): ISC BIND Data Processing Errors Vulnerability. High, CVSS 7.8, chance of use in 30 days >99%, known exploited since 8 October 2026.

## Which Isc flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2023-50387](https://www.precursorintelligence.com/what-is/cve-2023-50387): >99%, High (CVSS 7.5)
- [CVE-2015-5477](https://www.precursorintelligence.com/what-is/cve-2015-5477): >99%, High (CVSS 7.8), known exploited
- [CVE-2020-8617](https://www.precursorintelligence.com/what-is/cve-2020-8617): 93%, Medium (CVSS 5.9)
- [CVE-2016-2776](https://www.precursorintelligence.com/what-is/cve-2016-2776): 89%, High (CVSS 7.5)
- [CVE-2011-0997](https://www.precursorintelligence.com/what-is/cve-2011-0997): 85%, High (CVSS 7.5)
- [CVE-2015-8605](https://www.precursorintelligence.com/what-is/cve-2015-8605): 83%, Medium (CVSS 6.5)
- [CVE-2021-25216](https://www.precursorintelligence.com/what-is/cve-2021-25216): 82%, Critical (CVSS 9.8)
- [CVE-2010-2156](https://www.precursorintelligence.com/what-is/cve-2010-2156): 76%, Medium (CVSS 5.0)
- [CVE-2016-2774](https://www.precursorintelligence.com/what-is/cve-2016-2774): 74%, Medium (CVSS 5.9)

## All Isc products we track

8 products with at least one tracked version, most vulnerabilities first:

- [Bind](https://www.precursorintelligence.com/product/isc/bind): 173 vulnerabilities, 320 versions
- [DHCP](https://www.precursorintelligence.com/product/isc/dhcp): 25 vulnerabilities, 45 versions
- [Inn](https://www.precursorintelligence.com/product/isc/inn): 14 vulnerabilities, 16 versions
- [Dhcpd](https://www.precursorintelligence.com/product/isc/dhcpd): 8 vulnerabilities, 9 versions
- [Kea](https://www.precursorintelligence.com/product/isc/kea): 4 vulnerabilities, 29 versions
- [DHCP Client](https://www.precursorintelligence.com/product/isc/dhcp_client): 2 vulnerabilities, 3 versions
- [Stork](https://www.precursorintelligence.com/product/isc/stork): 1 vulnerability, 3 versions
- [Dnsco Bind](https://www.precursorintelligence.com/product/isc/dnsco_bind): 1 vulnerability, 2 versions

## Questions

### How many vulnerabilities does Isc have?

Our catalogue lists 227 published vulnerabilities across 8 products and 427 versions from Isc. The most recent Isc flaw added to the known-exploited list is CVE-2015-5477, on 8 October 2026.

### Which Isc vulnerabilities are being exploited?

1 Isc vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2015-5477. The full list is on this page.

### Which Isc product has the most vulnerabilities?

Bind, with 173 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Isc vulnerabilities?

Create a Precursor Intelligence account and track the Isc products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Isc?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact

