CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- apple macos, tvos, watchos +2 more +4 moreA race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS...8.1 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through...7.0 High
- debian linux, linux kernel, netapp h300e firmware +12 more +14 moreA read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain...7.0 High
- atomixAn issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.5.9 Medium
- fortinet fortiwebMultiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4...7.3 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this...8.1 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this...7.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 Medium
- huawei harmonyosThere is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this...5.9 Medium
- huawei harmonyosThere is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this...5.9 Medium
- huawei harmonyosThere is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this...3.7 Low
- tmate tmate-ssh-serverInsecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to...7.0 High
- google androidIn gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory...4.1 Medium
- google androidIn synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to...6.4 Medium
- google androidIn pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition....7.0 High
- amd athlon™ series, epyc 7001 firmware, epyc 7002 firmware +57 more +59 moreRace condition in PSP FW could allow less privileged x86 code to perform PSP SMM operations.7.0 High
- tokioRace Condition in tokio8.1 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...7.2 High
- gnu hurdAn issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid...7.5 High
- fortinet fortiportalA concurrent execution using shared resource with improper Synchronization vulnerability ('Race...3.1 Low
- android kernel, google android, debian linux +2 moreIn unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition....6.4 Medium
- sophos secure workspace for android, secure workspace +1 moreA local attacker could bypass the app password using a race condition in Sophos Secure Workspace...5.9 Medium
- huawei emui, magic ui +1 moreThere is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei...3.7 Low
- huawei emui, magic ui +1 moreThere is a issue that nodes in the linked list being freed for multiple times in Huawei...5.9 Medium
- google chrome, debian linux +1 moreRace in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially...7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received5.9 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions4.7 Medium
- freebsdFreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any...3.7 Low
- apple mac os x, security update - catalina +1 moreA race condition was addressed with additional validation. This issue is fixed in Security Update...7.5 High
- debian linux, linux kernel, redhat enterprise linux +2 moreModerate: kernel security and bug fix update4.7 Medium
- tibco jasperreports server, tibco software inc. jasperreports server - community edition, jasperreports server - developer edition +3 more +5 moreTIBCO JasperReports unauthorized access to temporary object5.7 Medium
- google androidIn RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race...8.1 High
- google androidIn VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a...7.8 High
- google androidIn multiple methods of AAudioService, there is a possible use-after-free due to a race condition....7.8 High
- debian linux, linux kernel, fedoraproject fedora +16 more +18 moreA use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls...7.1 High
- imagemagickIssue when Configuring the ImageMagick Security Policy4.4 Medium
- saltstack salt, fedoraproject fedora +1 moreImproper Authentication in SaltStack Salt6.4 Medium
- apple ipados, macos, tvos +4 more +6 moreA race condition was addressed with improved locking. This issue is fixed in Security Update 2021...5.9 Medium
- apple ipados, macos, tvos +4 more +6 moreA race condition was addressed with additional validation. This issue is fixed in Security Update...7.0 High
- apple ipados, ios and ipados, iphone os +2 moreA race condition was addressed with improved state handling. This issue is fixed in iOS 14.6 and...6.3 Medium
- apple ios, macos, iphone os +2 moreA race condition was addressed with improved state handling. This issue is fixed in iOS 14.7,...7.0 High
- xen, debian linux, fedoraproject fedora +2 moreAnother race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned...7.8 High
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreA race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4...7.0 High
- linux kernel, netapp active iq unified manager, bootstrap os +9 more +11 moreModerate: kernel-rt security and bug fix update4.7 Medium
- cyberark credential providerThe user identification mechanism used by CyberArk Credential Provider prior to 12.1 is...5.1 Medium
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon mobile, snapdragon wearables, qualcomm qca6574a firmware, qca6574au firmware +36 more +38 moreA race condition in fastrpc kernel driver for dynamic process creation can lead to use after free...6.7 Medium
- google androidIn lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race...7.0 High
- xen, debian linux, fedoraproject fedora +2 moregrant table v2 status pages may remain accessible after de-allocation Guest get permitted access...7.8 High
- apple macosA race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5. An application may be able to gain elevated privileges.7.0 High
- Show moreLoading…