CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreModerate: kernel-rt security and bug fix update7.0 High
- paramiko, debian linux, fedoraproject fedora +2 moreRace Condition in Paramiko5.9 Medium
- zulipRace condition in Zulip5.4 Medium
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- microsoft windows 10 version 1909, windows 10 version 20h2, windows 10 version 21h1 +6 more +8 moreWindows Update Stack Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +14 more +16 moreWindows ALPC Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +14 more +16 moreTablet Windows User Interface Application Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows NT OS Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 20h2 +8 more +10 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows ALPC Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +15 more +17 moreWindows Hyper-V Denial of Service Vulnerability4.7 Medium
- kofax printixPrintix Secure Cloud Print Management 1.3.1035.0 creates a temporary file in directory with...8.1 High
- google android, samsung mobile devices +1 moreAn use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash.4.0 Medium
- google androidIn usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read...4.1 Medium
- google androidIn gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due...6.4 Medium
- google androidIn eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is...4.1 Medium
- google android, debian linux +1 moreProduct: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel7.0 High
- google androidIn TBD of TBD, there is a possible user after free vulnerability due to a race condition. This...6.4 Medium
- google androidIn several functions of binder.c, there is a possible way to represent the wrong domain to...7.0 High
- kde kcronKDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename...7.8 High
- alexander anycommentAnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition3.1 Low
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administrator7.8 High
- hashicorp nomadHashiCorp Nomad Artifact Download Race Condition5.9 Medium
- gobase project gobase, github.com/ntbosscher/gobase github.com/ntbosscher/gobase/auth/httpauth +1 moreRace condition in github.com/ntbosscher/gobase3.7 Low
- google android, mediatek, inc. mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 +1 moreIn vow driver, there is a possible memory corruption due to a race condition. This could lead to...4.1 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is a race condition vulnerability in the binder driver subsystem in the kernel.Successful...4.7 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 High
- samba, debian linux, redhat enterprise linux +4 more +6 moreA flaw was found in the way Samba handled file/directory metadata. This flaw allows an...6.8 Medium
- crossbeam-rs crossbeamImproper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils8.1 High
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to race condition on application startup7.0 High
thread_localcrates.ioData race in `Iter` and `IterMut`No score- linux kernel, netapp a700s firmware, active iq unified manager +13 more +15 moreA use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED...6.8 Medium
- nvidia shield tv, shield experience +1 moreNVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition...4.7 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA race condition could have allowed bypassing the fullscreen notification which could have lead...5.9 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 20h2 +10 more +12 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +17 more +19 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- sambaAll versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS...2.5 Low
- google android, mediatek, inc. mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 +1 moreIn vow driver, there is a possible memory corruption due to a race condition. This could lead to...6.4 Medium
- huawei harmonyosLocation-related APIs exists a Race Condition vulnerability.Successful exploitation of this...8.1 High
- google androidIn init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race...7.0 High
- google androidIn phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +178 more +180 moreUse after free condition can occur in wired connectivity due to a race condition while creating...6.7 Medium
- linux kernelA use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface ...7.0 High
- Show moreLoading…