CWE-653: Improper Isolation or Compartmentalization
low-riskThe product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.
Common Consequences
Detection Methods
According to SOAR, the following detection techniques may be useful: Cost effective for partial coverage: Compare binary / bytecode to application permission manifest
According to SOAR, the following detection techniques may be useful: Highly cost effective: Manual Source Code Review (not inspections) Cost effective for partial coverage: Focused Manual Spotcheck - Focused manual analysis of source
According to SOAR, the following detection techniques may be useful: Highly cost effective: Inspection (IEEE 1028 standard) (can apply to requirements, design, source code, etc.) Formal Methods / Correct-By-Construction Cost effective for partial coverage: Attack Modeling
Real-World Examples (10)
| CVE | CVSS | EPSS | KEV |
|---|---|---|---|
| CVE-2025-1974 | 9.8 | 90.3% | — |
| CVE-2025-21590 | 4.4 | 0.8% | Y |
| CVE-2025-24986 | 6.5 | 0.6% | — |
| CVE-2024-49373 | 4.1 | 0.6% | — |
| CVE-2025-4083 | 9.1 | 0.4% | — |
| CVE-2023-1305 | 8.1 | 0.3% | — |
| CVE-2024-57721 | 6.5 | 0.3% | — |
| CVE-2024-57720 | 6.5 | 0.3% | — |
| CVE-2024-57723 | 6.5 | 0.3% | — |
| CVE-2025-26393 | 5.4 | 0.3% | — |