CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, ios and ipados +1 more +3 moreA race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with ke…7.0 High
- apple ipados, macos, tvos +4 more +6 moreA race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, w…7.0 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement update7.5 High
- apple macos, mac os x +1 moreA race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A remote attacker may be able to cause unexpe…5.9 Medium
- apple ipados, macos, tvos +3 more +5 moreA race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execut…7.0 High
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel…7.0 High
- apple macos, ipados, iphone os +2 moreA race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to execute arbitrary code with kernel privileges.7.0 High
- apple macos, mac os x +1 moreA race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able…7.0 High
- apple macosA race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel priv…7.0 High
- apple ipados, macos, tvos +3 more +5 moreA race condition was addressed with improved locking. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6.…7.0 High
- google chrome, fedoraproject fedora +1 moreData race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to...7.5 High
- cpanelIn cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreA suspected race condition when calling getaddrinfo led to memory corruption and a potentially...8.1 High
- golang go, debian linux, fedoraproject fedora +2 more +4 moreGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 Medium
- huawei emui, magic ui +1 moreThere is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this...8.1 High
- huawei emui, magic ui +1 moreThere is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation...8.1 High
- huawei emui, magic ui +1 moreThere is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of...8.1 High
- crossbeam-rs crossbeam, fedoraproject fedora +1 moreData race in crossbeam-deque9.8 Critical
- teluu pjsip, debian linux, pjsip pjproject +2 moreDenial of Service in PJSIP5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreA flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found...7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +11 more +13 moreWindows AppX Deployment Extensions Elevation of Privilege Vulnerability7.0 High
- fortinet fortisandboxA concurrent execution using shared resource with improper synchronization ('race condition') in...6.3 Medium
- tokioRace condition in tokio5.9 Medium
- google androidIn several functions of the V8 library, there is a possible use after free due to a race...8.1 High
- huawei manageone, smc2.0 +1 moreThere is a multiple threads race condition vulnerability in Huawei product. A race condition...4.1 Medium
- phoenix contact fl switch, fl nat, phoenixcontact fl nat smn 8tx-m firmware +14 more +16 moreRace Condition Vulnerability in Phoenix Contact FL SWITCH SMCS series products7.5 High
- bluetooth core specificationUnencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2...5.3 Medium
- huawei ecns280 td firmwareThere is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a...5.3 Medium
- autoptimizeAutoptimize < 2.7.8 - Race Condition leading to RCE8.1 High
- linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker...7.0 High
- samsung android, mobile devices, samsung mobile devices +2 moreA race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to...6.4 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreA use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021...6.4 Medium
- intel bios, netapp aff bios, cloud backup +15 more +17 moreRace condition in the firmware for some Intel(R) Processors may allow a privileged user to...6.4 Medium
- intel local manageability service, siemens simatic field pg m5 firmware, simatic field pg m6 firmware +10 more +12 moreRace condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a...6.4 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +88 more +90 morePossible use after free in Display due to race condition while creating an external display in...8.4 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found...6.4 Medium
- google androidIn wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition....7.0 High
- google androidIn decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This...6.4 Medium
- google androidIn memory management driver, there is a possible memory corruption due to a race condition. This...7.0 High
- google androidIn memory management driver, there is a possible memory corruption due to a race condition. This...7.0 High
- google androidIn several functions of MemoryFileSystem.cpp and related files, there is a possible use after...7.0 High
- google androidIn various functions of CryptoPlugin.cpp, there is a possible use after free due to a race...7.0 High
- google androidIn various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition...7.0 High
- bouncycastle bc-csharp, bouncy castle fips .net api, fips java api +1 more +3 moreTiming based private key exposure in Bouncy Castle5.9 Medium
- couchbase serverAn issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View...4.4 Medium
- linuxfoundation runc, fedoraproject fedora +1 moremount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for...5.9 Medium
- mcafee endpoint security for linux threat prevention, mcafee,llc mcafee endpoint security (ens) for linux +1 moreBy exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security...8.2 High
- debian linux, linux kernel, netapp cloud backup +8 more +10 morenet/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal...7.0 High
- mozilla firefox, firefox for android +1 moreWhen Web Render components were destructed, a race condition could have caused undefined behavior...7.5 High
- Show moreLoading…