CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- redhat ansible runneransible-runner vulnerable to Race Condition6.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker...8.8 High
- eternal terminal project terminal, jason gauci eternal terminal +1 moreSecurity update for EternalTerminal7.5 High
- eternal terminal project terminal, jason gauci eternal terminal +1 moreSecurity update for EternalTerminal7.0 High
- eternal terminal project terminal, jason gauci eternal terminal +1 moreSecurity update for EternalTerminal7.5 High
- google androidIn the Audio HAL, there is a possible out of bounds write due to a race condition. This could...6.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +15 more +17 moreWindows Hyper-V Remote Code Execution Vulnerability7.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.3 High
- linux kernelA race condition was found in the way the Linux kernel's memory subsystem handled the copy-on...7.0 High
- google chromeUse after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote...8.8 High
- frroutingAn issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and...8.1 High
- google android, mediatek, inc. mt6739, mt6761, mt6765, mt6771, mt8163, mt8167, mt8173, mt8183, mt8362a, mt8385, mt8695 +1 moreIn video codec, there is a possible memory corruption due to a race condition. This could lead to...6.4 Medium
- google android, mediatek, inc. mt6779, mt6781, mt6785, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8791, mt8797, mt8798 +1 moreIn audio ipi, there is a possible memory corruption due to a race condition. This could lead to...6.4 Medium
- google androidIn st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race...6.4 Medium
- google androidIn dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race...6.4 Medium
- google androidIn stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process...7.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 Medium
- linux kernelA race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing...5.1 Medium
- linux kernelA race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL...5.1 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +3 more +5 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h1 +9 more +11 moreWindows Connected Devices Platform Service Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Group Policy Elevation of Privilege Vulnerability6.6 Medium
- octobercms octoberRace Condition in October CMS upload process8.1 High
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8791, mt8797, mt8798 +1 moreIn MDP, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6875, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983 +1 moreIn TEEI driver, there is a possible use after free due to a race condition. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6755, mt6755s, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893 +1 moreIn TEEI driver, there is a possible use after free due to a race condition. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6771, mt6779, mt6833, mt6879, mt6885, mt6893, mt6895, mt6983, mt8185, mt8765, mt8766, mt8768, mt8785, mt8786, mt8788, mt8791, mt8797 +1 moreIn TEEI driver, there is a possible type confusion due to a race condition. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8168, mt8365 +1 moreIn GED driver, there is a possible use after free due to a race condition. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6768, mt6769, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983 +1 moreIn GPU, there is a possible use after free due to a race condition. This could lead to local...7.0 High
- dradisframework dradisDradis Professional Edition before 4.3.0 allows attackers to change an account password via...5.9 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53...6.5 Medium
- amazon hotpatchVersions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3...7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows Hyper-V Remote Code Execution Vulnerability8.5 High
- huawei emui, harmonyos, magic ui +2 moreThe kernel module has the race condition vulnerability. Successful exploitation of this...4.7 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in...6.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- google androidIn ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a...7.0 High
- google androidIn lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This...6.4 Medium
- google androidIn TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to...6.4 Medium
- google androidIn ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This...7.0 High
- Show moreLoading…