Patchfirst: ISC vulnerabilitieshttps://patchfirst.co/vendor/isc/New and newly exploited ISC CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2015-5477: ISC BIND Data Processing Errors Vulnerabilityhttps://patchfirst.co/cve/CVE-2015-5477/CVE-2015-5477#kevThu, 08 Oct 2026 00:00:00 GMTISC · BIND. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 68.2 of 100.kevpublic-exploitT1190T1499.004CVE-2021-25216: A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackhttps://patchfirst.co/cve/CVE-2021-25216/CVE-2021-25216Thu, 29 Apr 2021 00:00:00 GMTISC · BIND9. Not in CISA KEV. EPSS 83.0% (higher than 99.67% of CVEs). CVSS 8.1 HIGH. Priority 26.3 of 100.CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackhttps://patchfirst.co/cve/CVE-2020-8625/CVE-2020-8625Wed, 17 Feb 2021 00:00:00 GMTISC · BIND9. Not in CISA KEV. EPSS 64.2% (higher than 99.23% of CVEs). CVSS 8.1 HIGH. Priority 26.2 of 100.CVE-2020-8617: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.chttps://patchfirst.co/cve/CVE-2020-8617/CVE-2020-8617Tue, 19 May 2020 00:00:00 GMTISC · BIND9. Not in CISA KEV. EPSS 93.3% (higher than 99.84% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 30.9 of 100.public-exploitCVE-2018-5740: A flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedhttps://patchfirst.co/cve/CVE-2018-5740/CVE-2018-5740Wed, 16 Jan 2019 00:00:00 GMTISC · BIND 9. Not in CISA KEV. EPSS 60.2% (higher than 99.14% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 30.1 of 100.public-exploitCVE-2017-3144: Failure to properly clean up closed OMAPI connections can exhaust available socketshttps://patchfirst.co/cve/CVE-2017-3144/CVE-2017-3144Wed, 16 Jan 2019 00:00:00 GMTISC · ISC DHCP. Not in CISA KEV. EPSS 72.7% (higher than 99.45% of CVEs). CVSS 5.3 MEDIUM. Priority 23.6 of 100.