CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- parity libsecp256k1Observable Discrepancy in libsecp256k1-rs5.9 Medium
- squid analysis report generator project analysis report generator, opensuse backports sle, leap +2 morelog.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation....7.0 High
- gentoo portageGentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64...5.5 Medium
- siemens sinamics perfect harmony gh180 firmware, siemens ag sinamics perfect harmony gh180 drives mlfb 6sr32..-.....-.... mlfb 6sr4...-.....-.... mlfb 6sr5...-.....-.... with option a30 (hmis 12 inches or larger), sinamics perfect harmony gh180 drives mlfb 6sr325.-.....-.... (high availability) +2 moreA vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-....6.8 Medium
- vmware tools, tools for windows (vmware tools) +1 moreThe repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for...7.0 High
- linux kernelThe Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace...5.9 Medium
- mozilla firefox, firefox esr, opensuse leap +2 moreDuring the initialization of a new content process, a race condition occurs that can allow a...5.3 Medium
- google androidIn LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds...4.7 Medium
- red hat jboss portalIt was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp...5.9 Medium
- samba, redhat enterprise linux +1 moreMultiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow...4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreIn the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas...4.7 Medium
- intel platform trust technology firmware, server platform services firmware, trusted execution engine firmware +2 moreCryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11...5.9 Medium
- apple macos, mac os x +1 moreA race condition existed when reading and writing user preferences. This was addressed with...2.5 Low
- apple macos, mac os x +1 moreA validation issue existed in the handling of symlinks. This issue was addressed with improved...7.0 High
- apple ios, macos, iphone os +1 more +3 moreA race condition was addressed with additional validation. This issue is fixed in iOS 12.2, macOS...7.0 High
- apple icloud, icloud for windows +1 moreA race condition existed during the installation of iCloud for Windows. This was addressed with...7.5 High
- apple icloud, icloud for windows +1 moreA race condition existed during the installation of iTunes for Windows. This was addressed with...7.5 High
- excon, debian linux, opensuse backports sle +1 more +3 moreIn RubyGem excon, interrupted Persistent Connections May Leak Response Data5.8 Medium
- barco clickshare cs-100 firmware, clickshare cse-200\+ firmware, clickshare cse-200 firmware +1 more +3 moreOn Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is...5.9 Medium
- edeploy, redhat jboss enterprise web server +1 moreeDeploy has tmp file race condition flaws8.1 High
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS...6.6 Medium
- google androidIn System UI, there is a possible bypass of user's consent for access to sensor data due to a...4.7 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when checking the Resist Fingerprinting preference during device...7.5 High
- linux kernelIn the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a...4.2 Medium
- titanhq webtitanAn issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root...8.1 High
- xcfa, debian linux +1 morexcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a...7.0 High
- xcfaxcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a...4.7 Medium
- cookie-signature project cookie-signature, debian linux +1 morecookie-signature Timing Attack4.4 Medium
- google androidIn binder_free_transaction of binder.c, there is a possible use-after-free due to a race...7.4 High
- huawei honor v20 firmware, p30 firmware, p30 pro firmware +2 moreCertain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreAn elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for...7.0 High
- dtc-xen project dtc-xendtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get...8.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 morePossible use after free issue due to race condition while attempting to mark the entry pages as...8.1 High
- archivemail, debian linux +1 morearchivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.8.1 High
- magento, adobe systems incorporated magento 1 & 2 +1 moreMagento 2 Community Edition RCE Vulnerability6.6 Medium
- sudo project sudoSudo through 1.8.29 allows local users to escalate to root if they have write access to file...7.0 High
- debian linux, linux kernel, broadcom fabric operating system +15 more +17 moreAn issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is...7.0 High
- gs-gplI race condition in Temp files was found in gs-gpl before 8.56 addons scripts.8.1 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS...7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy using a form with a data URI it was possible to gain access to the privileged JSONView object...5.4 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017...8.1 High
- arista extensible operating systemA vulnerability has been found in the implementation of the Label Distribution Protocol (LDP)...5.9 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...7.0 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +19 more +21 morePossible use-after-free issue due to a race condition while calling camera ioctl concurrently in...7.0 High
- google androidIn the Easel driver, there is possible memory corruption due to race conditions. This could lead...6.4 Medium
- google androidIn the Easel driver, there is possible memory corruption due to race conditions. This could lead...6.4 Medium
- google androidIn hostapd, there is a possible out of bounds write due to a race condition. This could lead to...6.4 Medium
- intel 3106 firmware, 4109t firmware, 4110 firmware +239 more +241 moreA race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may...4.8 Medium
- Show moreLoading…