CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition....8.1 High
- github.com/go-resty/resty/v2, resty project resty +1 moreHTTP request body disclosure in github.com/go-resty/resty/v25.9 Medium
- kamalkhan kk star ratingskk Star Ratings < 5.4.6 - Rating Tampering via Race Condition5.9 Medium
- palantir video-application-server, com.palantir.video:video-application-server +1 moreGotham Video Broken Authentication2.7 Low
- eclipse openj9Eclipse OpenJ9 possible infinite busy hang4.1 Medium
- hyperledger fabricCrosslinking transaction attack in hyperledger/fabric7.1 High
- intel aptio v uefi firmware integrator toolsRace condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an...6.5 Medium
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +76 more +78 moreA race condition in System Management Mode (SMM) code may allow an attacker using a compromised...8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- yop poll, yop-poll yop poll +1 moreYOP Poll <= 6.5.26 - Race Condition to Vote Manipulation5.3 Medium
- zitadelZITADEL race condition in lockout policy execution7.3 High
- huawei emui, harmonyos +1 moreRace condition vulnerability in the kernel module. Successful exploitation of this vulnerability...5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: slab-use-after-free write in txend due to race condition7.0 High
- schedmd slurm, fedoraproject fedora +1 moreSchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race...7.0 High
- linuxfoundation harbor, harbor project +1 moreTiming attack risk in Harbor5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWin32k Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +16 more +18 moreWindows Graphics Component Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +10 more +12 moreWindows Kernel Security Feature Bypass Vulnerability4.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +14 more +16 moreWindows Runtime Remote Code Execution Vulnerability7.0 High
- facebook whatsapp business for android, whatsapp business for ios, whatsapp desktop for mac +4 more +6 moreA race condition in an event subsystem led to a heap use-after-free issue in established audio...5.0 Medium
- facebook whatsapp business for android, whatsapp business for ios, whatsapp desktop for mac +4 more +6 moreA race condition in a network transport subsystem led to a heap use-after-free issue in...5.6 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreKernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h4.7 Medium
- google androidIn tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to...6.4 Medium
- phpkobo ajax poll scriptphpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap4.4 Medium
- apple macosA race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An...4.7 Medium
- huawei emui, harmonyos +1 moreVulnerability of mutex management in the bone voice ID trusted application (TA) module....3.7 Low
- openpmix, debian linux, fedoraproject fedora +2 moreOpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of...8.1 High
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Ventura...7.0 High
- google android, linuxfoundation yocto, mediatek iot yocto +2 more +4 moreIn camsys, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek mt8781, mediatek, inc. mt6879, mt6886, mt6895, mt6983, mt6985, mt8175, mt8188, mt8195, mt8365, mt8781 +2 moreIn pda, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek mt6761, mt6762 +30 more +32 moreIn ims service, there is a possible memory corruption due to a race condition. This could lead to...6.4 Medium
- python, debian linux, netapp active iq unified manager +1 more +3 moreAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Medium
- intel nuc 11 compute element cm11ebc4w firmware, nuc 11 compute element cm11ebi38w firmware, nuc 11 compute element cm11ebi58w firmware +171 more +173 moreRace condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially...4.6 Medium
- intel compute element stk2mv64cc firmware, nuc board nuc7i3bnb firmware, nuc board nuc7i3bnh firmware +68 more +70 moreRace condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially...7.5 High
- intel ethernet network controller e810-cam1 firmware, ethernet network controller e810-cam2 firmware, ethernet network controller e810-xxvam2 firmware +2 moreRace condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before...6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +10 more +12 moreWindows Projected File System Elevation of Privilege Vulnerability7.0 High
- google android, linuxfoundation yocto, mediatek mt6879 +7 more +9 moreIn imgsys, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- mozilla firefox, firefox esr, debian linux +2 moreRace conditions in reference counting code were found through code inspection. These could have...5.9 Medium
- google androidIn update of MmsProvider.java, there is a possible way to bypass file permission checks due to a...5.5 Medium
- qemu, fedora extra packages for enterprise linux, fedora +7 more +9 moreTriggerable assertion due to race condition in hot-unplug5.6 Medium
- Show moreLoading…