CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- hashicorp vagrant vmware fusionThe vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write...7.8 High
- kaseya virtual system administratorIt is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race...7.4 High
- canonical screen-resolution-extra, ubuntu linux +1 morescreenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit...7.0 High
- debian linux, linux kernel +1 moreThe add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly...7.0 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- glpi-project glpiA remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition...7.5 High
- linux kernelIn the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a...4.7 Medium
- libvips, debian linux +1 moreIn libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more** DISPUTED ** Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu...4.7 Medium
- google android, nvidia shield tv, shield tv firmware +2 moreNVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the...7.0 High
- linux kernelThe dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local...4.7 Medium
- microsoft windows 7, windows 8, windows 8.1 +2 more +4 moreAn issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition...7.0 High
- leptonicaLeptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to...7.0 High
- atlassian floodlightRace condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2...5.9 Medium
- redhat automatic bug reporting toolThe crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve...7.0 High
- jenkinsRace Condition in Jenkins8.1 High
- yandex browser, yandex n.v. browser for android +1 moreRace condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to...7.5 High
- apache guacamoleApache Guacamole Race Condition vulnerability8.1 High
- red hat, inc. systemd, canonical ubuntu linux, debian linux +8 more +10 moreIn systemd prior to 234 a race condition exists between .mount and .automount units such that...5.9 Medium
- linux kernelIn the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability...5.9 Medium
- google androidIn the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after...7.0 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreIn the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization,...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- vladtheenterprising project vladtheenterprisingVladTheEnterprising allows local users to obtain sensitive information by reading MySQL root password from temporary file7.0 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA use-after-free vulnerability was found in network namespaces code affecting the Linux kernel...4.7 Medium
- gnu coreutilsCVE-2017-18018 does not affect BellSoft software4.7 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software...7.5 High
- linux kernelThe raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- atlassian auto-unapprove plugin (for bitbucket server), bitbucket auto unapprove plugin +1 moreIt is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it...8.5 High
- arqbackup arqThe setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to...7.4 High
- linux kernelThe Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the...7.0 High
- postgresql, suse postgresql-init, linux enterprise server +2 morelocal privilege escalation in SUSE postgresql init script7.3 High
- huawei technologies co., ltd. p9, huawei p9 firmware +1 moreAudio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of...4.7 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the signature verification of the firmware update...9.9 Critical
- hashicorp vagrantIn HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or...7.8 High
- hashicorp vagrant vmware fusionIn HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or...7.0 High
- apple tvos, iphone os +1 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is...8.1 High
- Show moreLoading…