CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelAn issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a...6.4 Medium
- mozilla firefoxIf two Workers were simultaneously initializing their CacheStorage, a data race could have...7.1 High
- samba, fedoraproject fedora +1 moreA flaw was found in samba. A race condition in the password lockout code may lead to the risk of...5.9 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel IPsec idt77252.c tst_timer use after free5.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreA vulnerability regarding concurrent execution using shared resource with improper...10.0 Critical
- debian linux, linux kernel +1 moreLinux Kernel BPF gup.c follow_page_pte race condition5.0 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions5.9 Medium
- linux kernelLinux Kernel IPv6 inet6_dgram_ops race condition4.6 Medium
- linux kernelLinux Kernel TCP tcp_setsockopt race condition2.1 Low
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreLinux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel kcm kcmsock.c kcm_tx_work race condition2.6 Low
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows ALPC Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Storage Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +12 more +14 moreConnected User Experiences and Telemetry Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- google android, debian linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to...7.0 High
- google androidIn dllist_remove_node of TBD, there is a possible use after free bug due to a race condition....7.0 High
- linux kerneldrivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and...4.2 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreroccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race...4.7 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and...4.2 Medium
- google chromeUse after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to...8.8 High
- apache tomcat, debian linux +1 moreApache Tomcat: Information disclosure3.7 Low
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It...4.7 Medium
- blaz k. rate my post – wp rating system (wordpress plugin), blazzdev rate my post - wp rating system +1 moreWordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability4.3 Medium
- smokepingIn the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThe MPTCP module has the race condition vulnerability. Successful exploitation of this...5.9 Medium
github.com/talos-systems/talosGoTalos vulnerable dependency due to race condition in Linux kernel's IP framework XFRM7.0 High- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +19 more +21 moreWindows ALPC Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Photo Import API Elevation of Privilege Vulnerability7.0 High
- wp-postratings project wp-postratings, lester 'gamerz' chan wp-postratings (wordpress plugin) +1 moreWP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition4.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c...4.7 Medium
- opensuse factory, suse opensuse factory +1 moreslurm: %post for slurm-testsuite operates as root in user owned directory6.5 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn apusys, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- apache airflowOverly permissive umask for daemons4.7 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of...4.7 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote...8.8 High
- google androidIn PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race...7.0 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreAn issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver...7.0 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA race condition was found in the Linux kernel's IP framework for transforming packets (XFRM...7.0 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +4 more +6 moreA use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user...7.0 High
- [unknown] vdsm, redhat virtualization, virtualization for ibm power little endian +1 more +3 moreA race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that...4.7 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreA race condition was found in the Linux kernel's watch queue due to a missing lock in...7.0 High
- Show moreLoading…