CWE-653 · Access Control
Improper Isolation or Compartmentalization
74CVEs
SortMost likely exploited
74 CVEs with CWE-653 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-21590In CISA KEVExploitedJunos OS: An local attacker with shell access can execute arbitrary codeJuniper Networks · Junos OS · CVSS 4.4 · 2025-03-12 | 4.4 | 1.7% | 2025-03-12 |
| CVE-2025-1974CheckIngress-Nginx Controller - Remote Code Executionkubernetes · ingress-nginx · CVSS 9.8 · 2025-03-24 | 9.8 | 99% | 2025-03-24 |
| CVE-2025-57738Apache Syncope: Remote Code Execution by delegated administratorsApache Software Foundation · Apache Syncope · CVSS 7.2 · 2025-10-20 | 7.2 | 24% | 2025-10-20 |
| CVE-2026-53421Apache Syncope: Remote Code Execution via Scripted ConnectorApache Software Foundation · Apache Syncope · CVSS 9.8 · 2026-07-20 | 9.8 | 1.1% | 2026-07-20 |
| CVE-2024-0135NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit o…NVIDIA · NVIDIA Container Toolkit · CVSS 7.6 · 2025-01-28 | 7.6 | 1.1% | 2025-01-28 |
| CVE-2026-109443JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shelljd-opensource · JoySafeter · CVSS 8.8 · 2026-10-20 | 8.8 | 0.9% | 2026-10-20 |
| CVE-2024-33768lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.Sammycage · Lunasvg · CVSS 9.8 · 2024-05-01 | 9.8 | 0.8% | 2024-05-01 |
| CVE-2023-1305Rapid7 InsightCloudSec box object accessRapid7 · InsightCloudSec · CVSS 8.1 · 2023-03-21 | 8.1 | 0.8% | 2023-03-21 |
| CVE-2025-41688High Privilege RCE via LUA Sandbox EscapeMB connect line · mbNET HW1 · CVSS 7.2 · 2025-07-31 | 7.2 | 0.8% | 2025-07-31 |
| CVE-2026-63071Apache Syncope: RCE via Groovy Sandbox bypassApache Software Foundation · Apache Syncope · CVSS 9.8 · 2026-07-20 | 9.8 | 0.8% | 2026-07-20 |
| CVE-2026-53405Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTaskApache Software Foundation · Apache Syncope · CVSS 9.8 · 2026-07-20 | 9.8 | 0.7% | 2026-07-20 |
| CVE-2024-0136NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and write access to hos…NVIDIA · NVIDIA Container Toolkit · CVSS 7.6 · 2025-01-28 | 7.6 | 0.7% | 2025-01-28 |
| CVE-2026-0542Remote Code Execution in ServiceNow AI PlatformServiceNow · ServiceNow AI Platform · CVSS 9.2 · 2026-02-25 | 9.2 | 0.7% | 2026-02-25 |
| CVE-2026-42782Apache Syncope: Post-auth RCE via Groovy staticApache Software Foundation · Apache Syncope · CVSS 7.2 · 2026-05-25 | 7.2 | 0.7% | 2026-05-25 |
| CVE-2026-15738Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer ControllerAmazon · aws-load-balancer-controller · CVSS 8.5 · 2026-07-14 | 8.5 | 0.6% | 2026-07-14 |
| CVE-2026-119408n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodesn8n-io · n8n · CVSS 8.8 · 2026-10-30 | 8.8 | 0.6% | 2026-10-30 |
| CVE-2024-8118Grafana alerting wrong permission on datasource rule write endpointGrafana · Grafana · CVSS 5.1 · 2024-09-26 | 5.1 | 0.6% | 2024-09-26 |
| CVE-2026-113687Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypassApache Software Foundation · Apache Syncope · CVSS 9.8 · 2026-11-02 | 9.8 | 0.6% | 2026-11-02 |
| CVE-2025-24986Azure Promptflow Remote Code Execution VulnerabilityMicrosoft · Azure promptflow-core · CVSS 6.5 · 2025-03-11 | 6.5 | 0.5% | 2025-03-11 |
| CVE-2026-109083Apache Syncope: Remote Code Execution via Flowable JUEL expressionApache Software Foundation · Apache Syncope · CVSS 9.8 · 2026-11-02 | 9.8 | 0.5% | 2026-11-02 |
| CVE-2026-4692Sandbox escape in the Responsive Design Mode componentMozilla · Firefox · CVSS 9.6 · 2026-03-24 | 9.6 | 0.5% | 2026-03-24 |
| CVE-2026-114087Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secretstriggerdotdev · trigger.dev · CVSS 8.1 · 2026-10-21 | 8.1 | 0.5% | 2026-10-21 |
| CVE-2023-1636Incomplete container isolationOpenstack · openstack-barbican · CVSS 6 · 2023-09-24 | 6.0 | 0.5% | 2023-09-24 |
| CVE-2024-53855User can view tickets from organizations they're not apart of in centurion_erpnofusscomputing · centurion_erp · CVSS 1.9 · 2024-11-27 | 1.9 | 0.5% | 2024-11-27 |
| CVE-2025-4083Process isolation bypass using "javascript:" URI links in cross-origin framesMozilla · Firefox · CVSS 9.1 · 2025-04-29 | 9.1 | 0.5% | 2025-04-29 |
| CVE-2026-109441LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridgeginlix-ai · LangAlpha · CVSS 5.8 · 2026-10-20 | 5.8 | 0.4% | 2026-10-20 |
| CVE-2024-55456lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cellSammycage · Lunasvg · CVSS 6.5 · 2025-02-03 | 6.5 | 0.4% | 2025-02-03 |
| CVE-2026-4282Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flawRed Hat · Red Hat build of Keycloak 26.2 · CVSS 7.4 · 2026-04-02 | 7.4 | 0.4% | 2026-04-02 |
| CVE-2026-115517Unrestricted network access between execution contexts in KNIME Business HubKNIME · KNIME Business Hub · CVSS 6.4 · 2026-10-22 | 6.4 | 0.4% | 2026-10-22 |
| CVE-2025-3086User in anonymous role could create and delete viewsM-Files Corporation · M-Files Server · CVSS 6.3 · 2025-04-04 | 6.3 | 0.4% | 2025-04-04 |
| CVE-2024-47520A user with advanced report application access rights can perform actions for which they are not authorizedArista Networks · Arista Edge Threat Management · CVSS 7.6 · 2025-01-10 | 7.6 | 0.4% | 2025-01-10 |
| CVE-2026-57135PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsMervinPraison · PraisonAI · CVSS 7.6 · 2026-09-15 | 7.6 | 0.4% | 2026-09-15 |
| CVE-2025-12805Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicyRed Hat · Red Hat OpenShift AI 2.25 · CVSS 8.1 · 2026-03-26 | 8.1 | 0.4% | 2026-03-26 |
| CVE-2024-49373Centurion ERP user can view projects from organizations they're not apart ofnofusscomputing · centurion_erp · CVSS 4.1 · 2024-10-22 | 4.1 | 0.4% | 2024-10-22 |
| CVE-2026-102125Kiteworks Core Sandbox EscapeKiteworks · Core · CVSS 8.8 · 2026-09-30 | 8.8 | 0.4% | 2026-09-30 |
| CVE-2026-65635Boruta dynamic client registration allows creation of over-privileged OAuth clientsmalach-it · boruta · CVSS 8.3 · 2026-07-30 | 8.3 | 0.4% | 2026-07-30 |
| CVE-2025-5476Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass VulnerabilitySony · XAV-AX8500 · CVSS 6.3 · 2025-06-21 | 6.3 | 0.4% | 2025-06-21 |
| CVE-2026-62246Kamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolationclastix · kamaji · CVSS 8.5 · 2026-07-30 | 8.5 | 0.4% | 2026-07-30 |
| CVE-2026-120306Beta9 build sandbox escape via chroot-only isolationbeam-cloud · Beta9 worker · CVSS 9.9 · 2026-11-01 | 9.9 | 0.4% | 2026-11-01 |
| CVE-2024-57723lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.Sammycage · Lunasvg · CVSS 6.5 · 2025-01-23 | 6.5 | 0.4% | 2025-01-23 |
| CVE-2024-57721lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.Sammycage · Lunasvg · CVSS 6.5 · 2025-01-23 | 6.5 | 0.4% | 2025-01-23 |
| CVE-2024-57720lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.Sammycage · Lunasvg · CVSS 6.5 · 2025-01-23 | 6.5 | 0.4% | 2025-01-23 |
| CVE-2024-23683Artemis Java Test Sandbox InvocationTargetException Subclass EscapeLs1intum · de.tum.in.ase:artemis-java-test-sandbox · CVSS 8.2 · 2024-01-19 | 8.2 | 0.4% | 2024-01-19 |
| CVE-2024-23682Artemis Java Test Sandbox Class Loading EscapeLs1intum · de.tum.in.ase:artemis-java-test-sandbox · CVSS 8.2 · 2024-01-19 | 8.2 | 0.4% | 2024-01-19 |
| CVE-2025-46215An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions…Fortinet · FortiSandbox · CVSS 5 · 2025-11-18 | 5.0 | 0.3% | 2025-11-18 |
| CVE-2025-12695Insecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandboxNo vendor recorded · CVSS 5.9 · 2025-11-04 | 5.9 | 0.3% | 2025-11-04 |
| CVE-2025-26393SolarWinds Service Desk Broken Access Control VulnerabilitySolarWinds · Service Desk · CVSS 5.4 · 2025-03-17 | 5.4 | 0.3% | 2025-03-17 |
| CVE-2024-0137NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespac…NVIDIA · NVIDIA Container Toolkit · CVSS 5.5 · 2025-01-28 | 5.5 | 0.3% | 2025-01-28 |
| CVE-2023-29580yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c.Yasm Project · Yasm · CVSS 5.5 · 2023-04-12 | 5.5 | 0.3% | 2023-04-12 |
| CVE-2025-34201Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker InstancesVasion · Print Virtual Appliance Host · CVSS 8.5 · 2025-09-19 | 8.5 | 0.3% | 2025-09-19 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.