CWE-653 · 75 kayıt

Improper Isolation or Compartmentalization

Bu sınıftaki CVE’ler

75 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
69Bu hafta	CVE-2025-1974Kavram kanıtı	ingress-nginx admission controller RCE escalationkubernetes · ingress-nginx · CWE-653 Girişsiz RCE	Kritik9,8	—	%99,4	24 Mar 2025
57Planlayın	CVE-2025-21590Silahlaştırılmış	Junos OS: An local attacker with shell access can execute arbitrary codejuniper · junos · CWE-653 RCE Yerel yetki yükseltme	Orta6,7	KEV	%1,7	12 Mar 2025
40Planlayın	CVE-2026-4692Kavram kanıtı	Sandbox escape in the Responsive Design Mode componentmozilla · firefox · CWE-653 Kimlik doğrulamasız	Kritik10,0	—	%0,5	24 Mar 2026
39İzleyin	CVE-2026-53421İstismar yok	Apache Syncope: Remote Code Execution via Scripted Connectorapache · syncope · CWE-653 Girişsiz RCE	Kritik9,8	—	%1,1	20 Tem 2026
39İzleyin	CVE-2024-33768İstismar yok	lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.sammycage · lunasvg · CWE-653 Kimlik doğrulamasız	Kritik9,8	—	%0,8	30 Nis 2024
39İzleyin	CVE-2026-63071İstismar yok	Apache Syncope: RCE via Groovy Sandbox bypassapache · syncope · CWE-653 Girişsiz RCE	Kritik9,8	—	%0,7	20 Tem 2026
39İzleyin	CVE-2026-53405İstismar yok	Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTaskapache · syncope · CWE-653 Girişsiz RCE	Kritik9,8	—	%0,7	20 Tem 2026
39İzleyin	CVE-2026-113687İstismar yok	Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypassapache software foundation · apache syncope · CWE-653 Girişsiz RCE	Kritik9,8	—	%0,5	2 Kas 2026
39İzleyin	CVE-2026-109083İstismar yok	Apache Syncope: Remote Code Execution via Flowable JUEL expressionapache software foundation · apache syncope · CWE-653 Girişsiz RCE	Kritik9,8	—	%0,5	2 Kas 2026
39İzleyin	CVE-2026-34775İstismar yok	Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processeselectronjs · electron · CWE-653 Kimlik doğrulamasız	Kritik9,8	—	%0,2	3 Nis 2026
36İzleyin	CVE-2026-0542Kavram kanıtı	Remote Code Execution in ServiceNow AI Platformservicenow · servicenow ai platform · CWE-653 Girişsiz RCE	Kritik9,2	—	%0,6	25 Şub 2026
36İzleyin	CVE-2026-114087İstismar yok	Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secretstriggerdotdev · trigger.dev · CWE-653 Kimlik doğrulamasız Kimlik doğrulama atlatma Gömülü kimlik bilgisi	Kritik9,2	—	%0,5	21 Eki 2026
36İzleyin	CVE-2025-4083İstismar yok	Process isolation bypass using "javascript:" URI links in cross-origin framesmozilla · firefox · CWE-653 Kimlik doğrulamasız	Kritik9,1	—	%0,4	29 Nis 2025
35İzleyin	CVE-2025-57738İstismar yok	Apache Syncope: Remote Code Execution by delegated administratorsapache · syncope · CWE-653 RCE	Yüksek7,2	—	%24,2	20 Eki 2025
35İzleyin	CVE-2026-102125İstismar yok	Kiteworks Core Sandbox Escapeaccellion · kiteworks · CWE-653 Yerel yetki yükseltme	Yüksek8,8	—	%0,3	30 Eyl 2026
35İzleyin	CVE-2025-5476İstismar yok	Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerabilitysony · xav-ax8500 firmware · CWE-653 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,8	—	%0,3	20 Haz 2025
35İzleyin	CVE-2024-20285İstismar yok	Cisco NX-OS Software Python Parser Escape Vulnerabilitycisco · nx-os · CWE-653 RCE Yerel yetki yükseltme	Yüksek8,8	—	%0,1	28 Ağu 2024
35İzleyin	CVE-2026-40968İstismar yok	Spring gRPC SecurityContext leaks across requests on authorization failurevmware · spring grpc · CWE-653	Yüksek8,8	—	%0,1	28 Nis 2026
34İzleyin	CVE-2026-109443İstismar yok	JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shelljd-opensource · joysafeter · CWE-653 RCE	Yüksek8,7	—	%0,8	20 Eki 2026
34İzleyin	CVE-2026-119408İstismar yok	n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodesn8n-io · n8n · CWE-653 RCE	Yüksek8,7	—	%0,6	30 Eki 2026
34İzleyin	CVE-2025-34201İstismar yok	Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instancesvasion · virtual appliance application · CWE-653	Yüksek8,5	—	%0,2	19 Eyl 2025
33İzleyin	CVE-2024-0136İstismar yok	NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted codenvidia · nvidia container toolkit · CWE-653	Yüksek8,4	—	%0,6	27 Oca 2025
33İzleyin	CVE-2026-65635İstismar yok	Boruta dynamic client registration allows creation of over-privileged OAuth clientsmalach-it · boruta · CWE-653 Kimlik doğrulamasız	Yüksek8,3	—	%0,3	30 Tem 2026
33İzleyin	CVE-2026-95699İstismar yok	MrSteam iSteamX Improper Isolation or Compartmentalizationmrsteam · isteamx application · CWE-653	Yüksek8,4	—	%0,2	24 Eyl 2026
33İzleyin	CVE-2026-34009İstismar yok	Container Escape Host user home directory mounted with write access into application containerqnap systems inc. · notes station 3 · CWE-653	Yüksek8,4	—	%0,1	15 Eki 2026

CVE-2025-1974
69Bu hafta
ingress-nginx admission controller RCE escalation
KritikCVSS 9,8Kavram kanıtıEPSS %99
- Girişsiz RCE
kubernetes · ingress-nginx24 Mar 2025
CVE-2025-21590
57Planlayın
Junos OS: An local attacker with shell access can execute arbitrary code
OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %1
- RCE
- Yerel yetki yükseltme
juniper · junos12 Mar 2025
CVE-2026-4692
40Planlayın
Sandbox escape in the Responsive Design Mode component
KritikCVSS 10,0Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
mozilla · firefox24 Mar 2026
CVE-2026-53421
39İzleyin
Apache Syncope: Remote Code Execution via Scripted Connector
KritikCVSS 9,8İstismar yokEPSS %1
- Girişsiz RCE
apache · syncope20 Tem 2026
CVE-2024-33768
39İzleyin
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
sammycage · lunasvg30 Nis 2024
CVE-2026-63071
39İzleyin
Apache Syncope: RCE via Groovy Sandbox bypass
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
apache · syncope20 Tem 2026
CVE-2026-53405
39İzleyin
Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTask
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
apache · syncope20 Tem 2026
CVE-2026-113687
39İzleyin
Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
apache software foundation · apache syncope2 Kas 2026
CVE-2026-109083
39İzleyin
Apache Syncope: Remote Code Execution via Flowable JUEL expression
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
apache software foundation · apache syncope2 Kas 2026
CVE-2026-34775
39İzleyin
Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
electronjs · electron3 Nis 2026
CVE-2026-0542
36İzleyin
Remote Code Execution in ServiceNow AI Platform
KritikCVSS 9,2Kavram kanıtıEPSS %0
- Girişsiz RCE
servicenow · servicenow ai platform25 Şub 2026
CVE-2026-114087
36İzleyin
Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets
KritikCVSS 9,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Gömülü kimlik bilgisi
triggerdotdev · trigger.dev21 Eki 2026
CVE-2025-4083
36İzleyin
Process isolation bypass using "javascript:" URI links in cross-origin frames
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
mozilla · firefox29 Nis 2025
CVE-2025-57738
35İzleyin
Apache Syncope: Remote Code Execution by delegated administrators
YüksekCVSS 7,2İstismar yokEPSS %24
- RCE
apache · syncope20 Eki 2025
CVE-2026-102125
35İzleyin
Kiteworks Core Sandbox Escape
YüksekCVSS 8,8İstismar yokEPSS %0
- Yerel yetki yükseltme
accellion · kiteworks30 Eyl 2026
CVE-2025-5476
35İzleyin
Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
sony · xav-ax8500 firmware20 Haz 2025
CVE-2024-20285
35İzleyin
Cisco NX-OS Software Python Parser Escape Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
cisco · nx-os28 Ağu 2024
CVE-2026-40968
35İzleyin
Spring gRPC SecurityContext leaks across requests on authorization failure
YüksekCVSS 8,8İstismar yokEPSS %0
vmware · spring grpc28 Nis 2026
CVE-2026-109443
34İzleyin
JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell
YüksekCVSS 8,7İstismar yokEPSS %0
- RCE
jd-opensource · joysafeter20 Eki 2026
CVE-2026-119408
34İzleyin
n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes
YüksekCVSS 8,7İstismar yokEPSS %0
- RCE
n8n-io · n8n30 Eki 2026
CVE-2025-34201
34İzleyin
Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances
YüksekCVSS 8,5İstismar yokEPSS %0
vasion · virtual appliance application19 Eyl 2025
CVE-2024-0136
33İzleyin
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code
YüksekCVSS 8,4İstismar yokEPSS %0
nvidia · nvidia container toolkit27 Oca 2025
CVE-2026-65635
33İzleyin
Boruta dynamic client registration allows creation of over-privileged OAuth clients
YüksekCVSS 8,3İstismar yokEPSS %0
- Kimlik doğrulamasız
malach-it · boruta30 Tem 2026
CVE-2026-95699
33İzleyin
MrSteam iSteamX Improper Isolation or Compartmentalization
YüksekCVSS 8,4İstismar yokEPSS %0
mrsteam · isteamx application24 Eyl 2026
CVE-2026-34009
33İzleyin
**Container Escape** Host user home directory mounted with write access into application container
YüksekCVSS 8,4İstismar yokEPSS %0
qnap systems inc. · notes station 315 Eki 2026

Tüm zafiyet sınıfları