CWE-653 · Access Control
Improper Isolation or Compartmentalization
74CVEs
SortMost likely exploited
74 CVEs with CWE-653 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-95699MrSteam iSteamX Improper Isolation or CompartmentalizationMrSteam · iSteamX application · CVSS 9.6 · 2026-09-24 | 9.6 | 0.3% | 2026-09-24 |
| CVE-2026-34775Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processeselectron · electron · CVSS 6.8 · 2026-04-03 | 6.8 | 0.3% | 2026-04-03 |
| CVE-2025-27027Restricted shell evasion in Radiflow iSAP Smart CollectorRadiflow · iSAP Smart Collector · CVSS 4.1 · 2025-07-09 | 4.1 | 0.3% | 2025-07-09 |
| CVE-2024-30388Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flapsJuniper Networks · Junos OS · CVSS 6.5 · 2024-04-12 | 6.5 | 0.3% | 2024-04-12 |
| CVE-2025-41116Incorrect oauth passthrough in Grafana Databricks DatasourceGrafana Labs · Grafana Databricks Datasource Plugin · CVSS 2.1 · 2025-11-11 | 2.1 | 0.3% | 2025-11-11 |
| CVE-2025-3717Incorrect oauth passthrough in Grafana Snowflake DatasourceGrafana Labs · Grafana Snowflake Datasource Plugin · CVSS 2.1 · 2025-11-11 | 2.1 | 0.3% | 2025-11-11 |
| CVE-2025-53710Network boundaries not respected in certain Foundry namespaces.Palantir · com.palantir.compute:compute-service · CVSS 7.5 · 2025-12-18 | 7.5 | 0.3% | 2025-12-18 |
| CVE-2026-5600A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-in events belonging to the respective org…pretix · pretix · CVSS 5.5 · 2026-04-08 | 5.5 | 0.3% | 2026-04-08 |
| CVE-2026-4325Keycloak: keycloak: replay of action tokens via improper handling of single-use entriesRed Hat · Red Hat build of Keycloak 26.2 · CVSS 5.3 · 2026-04-02 | 5.3 | 0.3% | 2026-04-02 |
| CVE-2026-97029Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process groupRed Hat · Red Hat Enterprise Linux 10 · CVSS 5.7 · 2026-09-29 | 5.7 | 0.2% | 2026-09-29 |
| CVE-2026-5599API allows deletion of users of other instancepretix · Venueless · CVSS 7.3 · 2026-04-05 | 7.3 | 0.2% | 2026-04-05 |
| CVE-2026-15366A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the pagevivo · Kids Mode · CVSS 2.4 · 2026-08-26 | 2.4 | 0.2% | 2026-08-26 |
| CVE-2024-35425vmir e8117 was discovered to contain a segmentation violation via the function_prepare_parse function at /src/vmir_function.c.Lonelycoder · Vmir · CVSS 5.5 · 2024-11-08 | 5.5 | 0.2% | 2024-11-08 |
| CVE-2026-25905Lack of isolation in mcp-run-python leads to MCP server takeoverNo vendor recorded · CVSS 5.8 · 2026-02-09 | 5.8 | 0.2% | 2026-02-09 |
| CVE-2024-20285Cisco NX-OS Software Python Parser Escape VulnerabilityCisco · Cisco NX-OS Software · CVSS 5.3 · 2024-08-28 | 5.3 | 0.2% | 2024-08-28 |
| CVE-2026-40968Spring gRPC SecurityContext leaks across requests on authorization failureSpring · Spring gRPC · CVSS 4.3 · 2026-04-28 | 4.3 | 0.2% | 2026-04-28 |
| CVE-2025-20109Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege…Intel(R) Processors · CVSS 7.8 · 2025-08-12 | 7.8 | 0.2% | 2025-08-12 |
| CVE-2026-71325Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendReftraefik · traefik · CVSS 4.8 · 2026-08-06 | 4.8 | 0.2% | 2026-08-06 |
| CVE-2024-35281An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop…Fortinet · FortiClientMac · CVSS 2.3 · 2025-05-13 | 2.3 | 0.1% | 2025-05-13 |
| CVE-2026-106588In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.OpenBSD · OpenSSH · CVSS 3.1 · 2026-10-06 | 3.1 | 0.1% | 2026-10-06 |
| CVE-2026-101078deepseek-ai deepseek-harness Landlock Backend profiles.ts isolationdeepseek-ai · deepseek-harness · CVSS 6.3 · 2026-09-28 | 6.3 | 0.1% | 2026-09-28 |
| CVE-2026-34009**Container Escape** Host user home directory mounted with write access into application containerQNAP Systems Inc. · Notes Station 3 · CVSS 8.4 · 2026-10-15 | 8.4 | 0.1% | 2026-10-15 |
| CVE-2026-20032Cisco NX-OS Software Python Sandbox Escape VulnerabilityCisco · Cisco NX-OS Software · CVSS 4.4 · 2026-10-07 | 4.4 | 0.1% | 2026-10-07 |
| CVE-2026-41155GPU DDK - SharedSecMem mapped into all GPU virtual address spacesImagination Technologies · Graphics DDK · CVSS 5.5 · 2026-06-12 | 5.5 | 0.1% | 2026-06-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.