CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- rusqlite project rusqliteImproper type usage in rusqlite9.8 Critical
- rusqlite project rusqliteData races in rusqlite8.1 High
- rusqlite project rusqliteUse after free in rusqlite9.8 Critical
- rusqlite project rusqliteMishandling of format strings in rusqlite9.8 Critical
- rusqlite project rusqliteData races in rusqlite9.8 Critical
- rusqlite project rusqliteData races in rusqlite9.8 Critical
- rusqlite project rusqliteData races in rusqlite9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 morePossible use after free issue in pcm volume controls due to race condition exist in private data...7.0 High
- intel driver \& support assistantRace condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an...4.7 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of...7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.5.9 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets)...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.x) software. There...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with M(6,x) and N(7.0) software. The TA Scrypto...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996,...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm...8.1 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreLinux kernel KVM Power8 conflicting use of HSTATE_HOST_R16.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain conditions, when handling a ReadableStream, a race condition can cause a use-after...8.1 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain conditions, when running the nsDocShell destructor, a race condition can cause a...8.1 High
- apple icloud, icloud for windows, ios +7 more +9 moreA race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and...3.1 Low
- lenovo system updateMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race...7.0 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) devices (Exynos and...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software....6.4 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (S.LSI...7.0 High
- red hat ansible, debian linux, fedoraproject fedora +2 more +4 moreCode Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible7.9 High
- meetecho janusAn issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin...5.9 Medium
- meetecho janusAn issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that...4.8 Medium
- meetecho janusAn issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin...4.2 Medium
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File5.0 Medium
- google androidIn the netlink driver, there is a possible out of bounds write due to a race condition. This...6.4 Medium
- google androidIn StatsService::command of StatsService.cpp, there is possible memory corruption due to a race...6.4 Medium
- froxlorFroxlor Exposure of Sensitive Information to an Unauthorized Actor5.5 Medium
- timeshift project timeshift, canonical ubuntu linux, fedoraproject fedora +2 moreinit_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +30 more +32 moreUnhandled paging request is observed due to dereferencing an already freed object because of race...7.0 High
- apple ios, ipados, iphone os +2 moreA race condition was addressed with improved locking. This issue is fixed in iOS 13.3.1 and...7.0 High
- gogsGogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to...5.9 Medium
- linux kernelInteger signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows...7.0 High
- cisco unified contact center enterpriseCisco Unified Contact Center Enterprise Denial of Service Vulnerability6.8 Medium
- huawei nip6800, nip6800 firmware, secospace usg6600, usg9500 +2 more +4 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and...5.3 Medium
- combodo itopIn Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of...8.1 High
- google androidIn binder_thread_release of binder.c, there is a possible use after free due to a race condition....7.0 High
- spritesoftware spritebud, spritebackup +1 moreA Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and...7.0 High
- libuv, nodejs node.js +1 moreThe uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does...8.1 High
- rulinalg project rulinalgData races in rulinalg9.8 Critical
- google chromeOut of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker...8.8 High
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mount7.0 High
- bromium client, hp bromium +1 moreBromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service6.1 Medium
- linux kernelIn a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read...6.2 Medium
- Show moreLoading…