CWE-653
44 CVEs classified under CWE-653. Browse by severity and year.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1974 | Critical | 9.8 | 2025-03-24 | A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary… |
CVE-2025-12805 | High | 8.1 | 2026-03-26 | A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other… |
CVE-2025-20109 | High | 7.8 | 2025-08-12 | Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable esc… |
CVE-2024-0136 | High | 7.6 | 2025-01-28 | NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code obtaining read and… |
CVE-2024-0135 | High | 7.6 | 2025-01-28 | NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A… |
CVE-2024-47520 | High | 7.6 | 2025-01-10 | A user with advanced report application access rights can perform actions for which they are not authorized |
CVE-2025-53710 | High | 7.5 | 2025-12-18 | Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This i… |
CVE-2026-4282 | High | 7.4 | 2026-04-02 | A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an un… |
CVE-2026-42782 | High | 7.2 | 2026-05-25 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malic… |
CVE-2025-41688 | High | 7.2 | 2025-07-31 | A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox. |
CVE-2026-34775 | Medium | 6.8 | 2026-04-03 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.4, 40.8.4, and 41.0.0, t… |
CVE-2025-29781 | Medium | 6.5 | 2025-03-17 | The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. Baremetal Operator enables users to load Secret from arbitra… |
CVE-2025-24986 | Medium | 6.5 | 2025-03-11 | Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network. |
CVE-2024-30388 | Medium | 6.5 | 2024-04-12 | An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on QFX5000 Series and EX Series… |
CVE-2026-41174 | Medium | 6.4 | 2026-04-30 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a potential vulnerability in Traefik's Kubernet… |
CVE-2025-5476 | Medium | 6.3 | 2025-06-21 | Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication… |
CVE-2023-1636 | Medium | 6.0 | 2023-09-24 | A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barb… |
CVE-2025-12695 | Medium | 5.9 | 2025-11-04 | The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input a… |
CVE-2026-25905 | Medium | 5.8 | 2026-02-09 | The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any Python code to use the Pyodide APIs to… |
CVE-2024-0137 | Medium | 5.5 | 2025-01-28 | NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the hos… |