CWE-653 · 72 records

Improper Isolation or Compartmentalization

CVEs in this class

72 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
69This week	CVE-2025-1974Proof of concept	ingress-nginx admission controller RCE escalationkubernetes · ingress-nginx · CWE-653 pre-auth RCE	Critical9.8	—	99.3%	Mar 24, 2025
57Plan	CVE-2025-21590Weaponized	Junos OS: An local attacker with shell access can execute arbitrary codejuniper · junos · CWE-653 RCE Local privilege escalation	Medium6.7	KEV	1.7%	Mar 12, 2025
40Plan	CVE-2026-4692Proof of concept	Sandbox escape in the Responsive Design Mode componentmozilla · firefox · CWE-653 Pre-auth	Critical10.0	—	0.5%	Mar 24, 2026
39Monitor	CVE-2026-53421No exploit	Apache Syncope: Remote Code Execution via Scripted Connectorapache · syncope · CWE-653 pre-auth RCE	Critical9.8	—	1.1%	Jul 20, 2026
39Monitor	CVE-2024-33768No exploit	lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.sammycage · lunasvg · CWE-653 Pre-auth	Critical9.8	—	0.8%	Apr 30, 2024
39Monitor	CVE-2026-63071No exploit	Apache Syncope: RCE via Groovy Sandbox bypassapache · syncope · CWE-653 pre-auth RCE	Critical9.8	—	0.7%	Jul 20, 2026
39Monitor	CVE-2026-53405No exploit	Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTaskapache · syncope · CWE-653 pre-auth RCE	Critical9.8	—	0.7%	Jul 20, 2026
39Monitor	CVE-2026-34775No exploit	Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processeselectronjs · electron · CWE-653 Pre-auth	Critical9.8	—	0.3%	Apr 3, 2026
36Monitor	CVE-2026-0542Proof of concept	Remote Code Execution in ServiceNow AI Platformservicenow · servicenow ai platform · CWE-653 pre-auth RCE	Critical9.2	—	0.6%	Feb 25, 2026
36Monitor	CVE-2025-4083No exploit	Process isolation bypass using "javascript:" URI links in cross-origin framesmozilla · firefox · CWE-653 Pre-auth	Critical9.1	—	0.4%	Apr 29, 2025
36Monitor	CVE-2026-114087No exploit	Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secretstriggerdotdev · trigger.dev · CWE-653 Pre-auth Auth bypass Hard-coded credentials	Critical9.2	—	0.3%	2 days ago
35Monitor	CVE-2025-57738No exploit	Apache Syncope: Remote Code Execution by delegated administratorsapache · syncope · CWE-653 RCE	High7.2	—	23.1%	Oct 20, 2025
35Monitor	CVE-2026-102125No exploit	Kiteworks Core Sandbox Escapeaccellion · kiteworks · CWE-653 Local privilege escalation	High8.8	—	0.3%	Sep 30, 2026
35Monitor	CVE-2025-5476No exploit	Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerabilitysony · xav-ax8500 firmware · CWE-653 Pre-auth Auth bypass	High8.8	—	0.3%	Jun 20, 2025
35Monitor	CVE-2026-40968No exploit	Spring gRPC SecurityContext leaks across requests on authorization failurevmware · spring grpc · CWE-653	High8.8	—	0.3%	Apr 28, 2026
35Monitor	CVE-2024-20285No exploit	Cisco NX-OS Software Python Parser Escape Vulnerabilitycisco · nx-os · CWE-653 RCE Local privilege escalation	High8.8	—	0.1%	Aug 28, 2024
34Monitor	CVE-2026-109443No exploit	JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shelljd-opensource · joysafeter · CWE-653 RCE	High8.7	—	0.7%	3 days ago
34Monitor	CVE-2025-34201No exploit	Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instancesvasion · virtual appliance application · CWE-653	High8.5	—	0.2%	Sep 19, 2025
33Monitor	CVE-2024-0136No exploit	NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted codenvidia · nvidia container toolkit · CWE-653	High8.4	—	0.6%	Jan 27, 2025
33Monitor	CVE-2026-65635No exploit	Boruta dynamic client registration allows creation of over-privileged OAuth clientsmalach-it · boruta · CWE-653 Pre-auth	High8.3	—	0.5%	Jul 30, 2026
33Monitor	CVE-2026-95699No exploit	MrSteam iSteamX Improper Isolation or Compartmentalizationmrsteam · isteamx application · CWE-653	High8.4	—	0.2%	Sep 24, 2026
33Monitor	CVE-2026-34009No exploit	Container Escape Host user home directory mounted with write access into application containerqnap systems inc. · notes station 3 · CWE-653	High8.4	—	0.1%	Oct 15, 2026
32Monitor	CVE-2023-1305No exploit	Rapid7 InsightCloudSec box object accessrapid7 · insightappsec · CWE-653	High8.1	—	0.7%	Mar 21, 2023
32Monitor	CVE-2025-12805No exploit	Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicyredhat · openshift ai · CWE-653	High8.1	—	0.3%	Mar 26, 2026
32Monitor	CVE-2024-23683No exploit	Artemis Java Test Sandbox InvocationTargetException Subclass Escapels1intum · artemis java test sandbox · CWE-653 RCE	High8.2	—	0.3%	Jan 19, 2024

CVE-2025-1974
69This week
ingress-nginx admission controller RCE escalation
CriticalCVSS 9.8Proof of conceptEPSS 99%
- pre-auth RCE
kubernetes · ingress-nginxMar 24, 2025
CVE-2025-21590
57Plan
Junos OS: An local attacker with shell access can execute arbitrary code
MediumCVSS 6.7KEVWeaponizedEPSS 1%
- RCE
- Local privilege escalation
juniper · junosMar 12, 2025
CVE-2026-4692
40Plan
Sandbox escape in the Responsive Design Mode component
CriticalCVSS 10.0Proof of conceptEPSS 0%
- Pre-auth
mozilla · firefoxMar 24, 2026
CVE-2026-53421
39Monitor
Apache Syncope: Remote Code Execution via Scripted Connector
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
apache · syncopeJul 20, 2026
CVE-2024-33768
39Monitor
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
sammycage · lunasvgApr 30, 2024
CVE-2026-63071
39Monitor
Apache Syncope: RCE via Groovy Sandbox bypass
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
apache · syncopeJul 20, 2026
CVE-2026-53405
39Monitor
Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTask
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
apache · syncopeJul 20, 2026
CVE-2026-34775
39Monitor
Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
electronjs · electronApr 3, 2026
CVE-2026-0542
36Monitor
Remote Code Execution in ServiceNow AI Platform
CriticalCVSS 9.2Proof of conceptEPSS 0%
- pre-auth RCE
servicenow · servicenow ai platformFeb 25, 2026
CVE-2025-4083
36Monitor
Process isolation bypass using "javascript:" URI links in cross-origin frames
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxApr 29, 2025
CVE-2026-114087
36Monitor
Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
triggerdotdev · trigger.dev2 days ago
CVE-2025-57738
35Monitor
Apache Syncope: Remote Code Execution by delegated administrators
HighCVSS 7.2No exploitEPSS 23%
- RCE
apache · syncopeOct 20, 2025
CVE-2026-102125
35Monitor
Kiteworks Core Sandbox Escape
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
accellion · kiteworksSep 30, 2026
CVE-2025-5476
35Monitor
Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
sony · xav-ax8500 firmwareJun 20, 2025
CVE-2026-40968
35Monitor
Spring gRPC SecurityContext leaks across requests on authorization failure
HighCVSS 8.8No exploitEPSS 0%
vmware · spring grpcApr 28, 2026
CVE-2024-20285
35Monitor
Cisco NX-OS Software Python Parser Escape Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
cisco · nx-osAug 28, 2024
CVE-2026-109443
34Monitor
JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell
HighCVSS 8.7No exploitEPSS 0%
- RCE
jd-opensource · joysafeter3 days ago
CVE-2025-34201
34Monitor
Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances
HighCVSS 8.5No exploitEPSS 0%
vasion · virtual appliance applicationSep 19, 2025
CVE-2024-0136
33Monitor
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code
HighCVSS 8.4No exploitEPSS 0%
nvidia · nvidia container toolkitJan 27, 2025
CVE-2026-65635
33Monitor
Boruta dynamic client registration allows creation of over-privileged OAuth clients
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
malach-it · borutaJul 30, 2026
CVE-2026-95699
33Monitor
MrSteam iSteamX Improper Isolation or Compartmentalization
HighCVSS 8.4No exploitEPSS 0%
mrsteam · isteamx applicationSep 24, 2026
CVE-2026-34009
33Monitor
**Container Escape** Host user home directory mounted with write access into application container
HighCVSS 8.4No exploitEPSS 0%
qnap systems inc. · notes station 3Oct 15, 2026
CVE-2023-1305
32Monitor
Rapid7 InsightCloudSec box object access
HighCVSS 8.1No exploitEPSS 0%
rapid7 · insightappsecMar 21, 2023
CVE-2025-12805
32Monitor
Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy
HighCVSS 8.1No exploitEPSS 0%
redhat · openshift aiMar 26, 2026
CVE-2024-23683
32Monitor
Artemis Java Test Sandbox InvocationTargetException Subclass Escape
HighCVSS 8.2No exploitEPSS 0%
- RCE
ls1intum · artemis java test sandboxJan 19, 2024

All vulnerability classes