Skip to content

CWE-1189 · weakness in Access Control

Improper Isolation of Shared Resources on System-on-a-Chip (SoC)

7 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2023-49141Intel(R) Processors stream cache mechanism · CVSS 7.8 · 0.3% likely
  2. Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege lev…CVE-2025-54518AMD · CVSS 7 · 0.3% likelycovered by CyberSIXT

    AMD

  3. Improper isolation of shared resources in aws-network-policy-agent in Amazon EKSCVE-2026-122266AWS · CVSS 8.7 · 0.3% likely

    AWS

  4. Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2023-42667Intel(R) Core(TM) Ultra Processor stream cache mechanism · CVSS 7.8 · 0.2% likely
  5. Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in l…CVE-2023-31325AMD · CVSS 7.2 · 0.1% likely

    AMD

  6. Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity.CVE-2025-54514AMD · CVSS 4.8 · 0.1% likely

    AMD

  7. Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to specific victim range of GP…CVE-2024-36332AMD · CVSS 6.8 · 0.1% likely

    AMD

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in