CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- collectiveidea auditedAudited Log Integrity Errors Due to Race Condition3.1 Low
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- linux kernelAn issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In...4.7 Medium
- linux kernel, netapp hci baseboard management controller +1 moreA race condition was found in the Linux kernel's RxRPC network protocol, within the processing of...7.0 High
- qualys cloud agentRace Condition6.7 Medium
- uniswap web3-react, web3-react coinbase-wallet, web3-react eip1193 +2 more +4 more`chainId` may be outdated if user changes chains as part of connection in @web3-react5.2 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged5.3 Medium
- mitsubishi electric india gc-enet-com, mitsubishielectric gc-enet-com firmware +1 moreSignal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first...7.5 High
- pax paydroid, paxtechnology a920 pro +1 morePAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows...7.0 High
- mozilla firefox, firefox for android, focus +2 more +4 moreMultiple race conditions in the font initialization could have led to memory corruption and...7.5 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +15 more +17 moreWindows Clip Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability7.5 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983, mt8781 +1 moreIn display drm, there is a possible double free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983, mt8781 +1 moreIn display drm, there is a possible double free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6879, mt6895, mt6983, mt8673, mt8781, mt8795t, mt8798, mt8891 +1 moreIn vdec, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6879, mt6895, mt6983, mt8673, mt8781, mt8795t, mt8798, mt8891 +1 moreIn vdec, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- linux, linux kernel +1 moreA race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the...4.7 Medium
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out...7.5 High
- google androidIn Display::setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race...4.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Graphics Component Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h2 +12 more +14 moreWindows BrokerInfrastructure Service Elevation of Privilege Vulnerability7.0 High
- kdab hotspotKDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege...7.0 High
- ibexa ez platform, kernel, commerce +4 more +6 moreTiming attack in eZ Platform Ibexa3.7 Low
- apple macosA race condition was addressed with additional validation. This issue is fixed in macOS Ventura...4.7 Medium
- apple ipados, tvos, watchos +1 more +3 moreA race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6,...6.3 Medium
- linux kernelAn issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race...5.7 Medium
- mpvAn issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash...7.0 High
- intel driver \& support assistantDescription: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an...7.5 High
- answer, answerdev answerdev/answer +1 moreConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer8.1 High
- couchbase serverAn issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7...8.1 High
- portfoliocms project portfoliocmsRace condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run...8.1 High
- wireguardWireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an...5.3 Medium
- hfiref0x lightftpA race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a...7.5 High
- oznetmaster ssharpsmartthreadpooloznetmaster SSharpSmartThreadPool SmartThreadPool.cs race condition4.6 Medium
- denoInteractive permission prompt spoofing in Deno7.5 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions...6.4 Medium
- microsoft windows 10 version 20h2, windows 10 version 21h2, windows 10 version 22h2 +5 more +7 moreWindows Local Session Manager (LSM) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Overlay Filter Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 20h2, windows 10 version 21h2, windows 10 version 22h2 +8 more +10 moreWindows Bind Filter Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows malicious software removal toolWindows Malicious Software Removal Tool Elevation of Privilege Vulnerability6.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 7 +18 more +20 moreWindows Installer Elevation of Privilege Vulnerability7.0 High
- Show moreLoading…