Vendor
ISC
1 of 6 ISC CVEs in Patchfirst (17%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild.
- CVEs
- 6
- In CISA KEV
- 117%
- Known ransomware use
- 0
- Median days to KEV
- 4,089
- from publication
- Latest KEV listing
- 8 Oct 2026
Products
In KEVOther CVEs
- BIND In KEV: 1 CVEs: 1
- BIND9 In KEV: 0 CVEs: 3
- BIND 9 In KEV: 0 CVEs: 1
- ISC DHCP In KEV: 0 CVEs: 1
Top ATT&CK techniques
What attackers do with ISC CVEs- T1190Exploit Public-Facing Application CVEs: 1
- T1499.004Application or System Exploitation CVEs: 1
Counts are ISC CVEs linked to the technique. Each link’s provenance is on the CVE page.
ISC CVEs
6 CVEs, by priority- CVE-2015-5477ISC BIND Data Processing Errors VulnerabilityISC · BINDKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation99.6%Top 0.05%68.2priority
- CVE-2020-8617A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cISC · BIND9Public exploitHigh · 7.593.3%Top 0.16%30.9priority
- CVE-2018-5740A flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedISC · BIND 9Public exploitHigh · 7.560.2%Top 0.86%30.1priority
- CVE-2021-25216A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackISC · BIND9High · 8.183.0%Top 0.33%26.3priority
- CVE-2020-8625A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackISC · BIND9High · 8.164.2%Top 0.77%26.2priority
- CVE-2017-3144Failure to properly clean up closed OMAPI connections can exhaust available socketsISC · ISC DHCPMedium · 5.372.7%Top 0.55%23.6priority