Class weakness
Draft
CWE-653: Improper Isolation or Compartmentalization
Also known as: Separation of Privilege
The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.
Last updated
50
Recorded CVEs
With this primary weakness
1
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Class
Abstraction
MITRE classification
Overview
When a weakness occurs in functionality that is accessible by lower-privileged users, then without strong boundaries, an attack might extend the scope of the damage to higher-privileged users.
Real-world CVEs
50 recorded CVEs are caused by CWE-653 (Improper Isolation or Compartmentalization), including 1 in CISA's KEV (Known Exploited Vulnerabilities) catalog. KEVs are shown first. 11 new CWE-653 CVEs have been recorded so far in 2026 (26 in 2025).