CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Services card might restart when DNS filtering is enabled8.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.6.5 Medium
- golang go, cloudfoundry cf-deployment, routing-release +3 more +5 moreGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 Medium
- freebsdIn FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4...8.1 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges...7.8 High
- huawei mate 30, mate 30 firmware +1 moreHUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition...6.3 Medium
- valvesoftware steam clientAn issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to...7.8 High
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...6.2 Medium
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...6.2 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...8.8 High
- mozilla firefox, opensuse leap +1 moreA VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster:...8.8 High
- nvidia virtual gpu manager, vgpu software +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it validates a...6.3 Medium
jsrsasignnpmECDSA signature vulnerability of Minerva timing attack in jsrsasign5.9 Medium- ifax hylafax enterprise, fedoraproject fedora, hylafax\+ project hylafax\+ +2 more +4 moreIn HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017...7.0 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...7.5 High
- aliasrobotics mir1000 firmware, mir100 firmware, mir200 firmware +8 more +10 moreRVD#2569: Insecure operating system defaults in MiR robots10.0 Critical
- nvidia gpu display driver, canonical ubuntu linux, nvidia geforce firmware +3 more +5 moreNVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in...4.7 Medium
- linux kernel, opensuse leap +1 moreIn the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and...4.2 Medium
- cisco amp for endpoints, clam antivirus, canonical ubuntu linux +3 more +5 moreCisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability5.5 Medium
- google androidIn TimeCheck::TimeCheckThread::threadLoop of TimeCheck.cpp, there is a possible use-after-free...4.1 Medium
- google androidIn loadSoundModel and related functions of SoundTriggerHwService.cpp, there is possible out of...7.0 High
- google androidIn OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a...4.4 Medium
- google androidIn multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race...6.4 Medium
- apple ios, ipados, macos +4 more +6 moreA race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and...7.0 High
- docker desktopAn issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up...7.8 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Denial of Service Vulnerability5.9 Medium
- vm-memory project vm-memoryImproper Synchronization and Race Condition in vm-memory7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen browsing a malicious page, a race condition in our SharedWorkerService could occur and lead...5.3 Medium
- teradici pcoip graphics agent, pcoip standard agent +1 moreInitialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and...7.8 High
- internment project internmentUse after free in internment8.1 High
- rocketData races in rocket8.1 High
- red hat oddjobA race condition was found in the mkhomedir tool shipped with the oddjob package in versions...6.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +15 more +17 moreWindows Error Reporting Elevation of Privilege Vulnerability7.8 High
- red hat ansible, redhat ansible tower +1 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Medium
- palo alto networks pan-osPAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation7.0 High
- freebsdIn FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11...7.4 High
- symantec endpoint protection managerSymantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote...7.0 High
- linux kernel, redhat enterprise mrg +1 moreThe fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local...7.0 High
- nvidia display driver, graphics drivers +1 moreKernel heap contents leak race in ioctl handler5.0 Medium
- siedle sg 150-0 firmwareThe S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via...7.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 High
- linux kernelThe __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14...4.1 Medium
- linux kernelA pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x...4.7 Medium
- torchbox wagtailPotential Observable Timing Discrepancy in Wagtail6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1...8.1 High
- sqliteodbc project sqliteodbc, fedoraproject fedora, opensuse backports sle +2 moreSQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition...7.0 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreIn the Linux kernel through 5.6.7 on the s390 platform, code execution may occur because of a...7.0 High
- openvpn, debian linux, fedoraproject fedora +2 moreAn issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 ...3.7 Low
- rusqlite project rusqliteUse after free in rusqlite9.8 Critical
- Show moreLoading…