CWE-653 · weakness in Access Control
Improper Isolation or Compartmentalization
74 CVEs · 1 exploited
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 1
- check available
- 1
- likely to be exploited
- 1
Every one of the 74 is a mark on the map. Named now: 1 to 26, most at risk first.
- Junos OS: An local attacker with shell access can execute arbitrary code
- Ingress-Nginx Controller - Remote Code Execution
- Apache Syncope: Remote Code Execution by delegated administrators
- Apache Syncope: Remote Code Execution via Scripted Connector
- NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit o…
- JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell
- lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
- Rapid7 InsightCloudSec box object access
- High Privilege RCE via LUA Sandbox Escape
- Apache Syncope: RCE via Groovy Sandbox bypass
- Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTask
- NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to hos…
- Remote Code Execution in ServiceNow AI Platform
- Apache Syncope: Post-auth RCE via Groovy static
- Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller
- n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes
- Grafana alerting wrong permission on datasource rule write endpoint
- Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass
- Azure Promptflow Remote Code Execution Vulnerability
- Apache Syncope: Remote Code Execution via Flowable JUEL expression
- Sandbox escape in the Responsive Design Mode component
- Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets
- Incomplete container isolation
- User can view tickets from organizations they're not apart of in centurion_erp
- Process isolation bypass using "javascript:" URI links in cross-origin frames
- LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.