CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Telephony Server Elevation of Privilege Vulnerability7.0 High
- apple macosA race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14...4.7 Medium
- apple macos, tvos, watchos +3 more +5 moreA race condition was addressed with improved state handling. This issue is fixed in tvOS 17.4,...4.7 Medium
- apple ios, ipados, macos +6 more +8 moreA race condition was addressed with additional validation. This issue is fixed in macOS Sonoma 14...4.7 Medium
- linux, linux kernel +1 moremedia: rkisp1: Fix IRQ disable race issue4.7 Medium
- linux, linux kernel +1 moredrm/msm/dpu: Add mutex lock in control vblank irq7.8 High
- linux, linux kernel +1 morenet: bridge: use DEV_STATS_INC()7.0 High
- linux, linux kernel +1 morespi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain7.8 High
- linux, linux kernel +1 morenet: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()8.8 High
- linux, linux kernel +1 morefs/proc/task_mmu: move mmu notification mechanism inside mm lock7.8 High
- debian linux, linux kernel +1 moremm/sparsemem: fix race in accessing memory_section->usage4.7 Medium
- mattermost, mattermost server +1 moreMattermost race condition2.6 Low
- linux, linux kernel +1 moreksmbd: fix race condition between session lookup and expire9.8 Critical
- linux, linux kernel +1 moref2fs: compress: fix race condition of overwrite vs truncate4.7 Medium
- linux, linux kernel +1 morenet/smc: fix kernel panic caused by race of smc_sock7.8 High
- apache answerApache Answer: Repeated submission at registration created duplicate users with the same name5.9 Medium
- linux, linux kernel +1 moretls: fix race between tx work scheduling and socket close9.8 Critical
- linux, linux kernel +1 moretls: fix race between async notify and socket close9.8 Critical
- decidimDecidim has race condition in Endorsements3.1 Low
- intel memory and storage toolRace condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to...1.8 Low
- dronecode px4 drone autopilotA Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot...4.2 Medium
- dronecode px4 drone autopilotPX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence...4.2 Medium
- linux kernelRace condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write()5.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRace condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()4.6 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRace condition vulnerability in Linux kernel net/bluetooth in {conn,adv}_{min,max}_interval_set()4.6 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreRace condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()4.6 Medium
- linux kernelRace condition vulnerability in Linux kernel bluetooth driver in {min,max}_key_size_set()4.6 Medium
- linux kernelRace condition vulnerability in Linux kernel media/xc4000 xc4000_get_frequency()3.3 Low
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreRace condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()5.0 Medium
- linux kernelRace condition vulnerability in Linux kernel sound/hda snd_hdac_regmap_sync5.3 Medium
- linux kernelRace condition vulnerability in Linux kernel drm/exynos exynos_drm_crtc_atomic_disable5.3 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6779, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6895, mt6983, mt6985, mt8321, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797, mt8798 +1 moreIn mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead...7.5 High
- google androidIn removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race...7.0 High
- moby buildkitBuildKit possible race condition with accessing subpaths from cache mounts8.7 High
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreKernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability7.5 High
- mozilla focus for ios, firefox focus +1 moreUsing a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized...7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Due to an error in processing TCP events flowd will crash5.9 Medium
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur...7.0 High
- apache answerApache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.3.1 Low
- microsoft remote desktop client for windows desktop, windows 10 version 1507, windows 10 version 1607 +27 more +29 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Hyper-V Remote Code Execution Vulnerability7.5 High
- qualcomm snapdragon 425 mobile platform firmware, snapdragon 427 mobile platform firmware, snapdragon 429 mobile platform firmware +121 more +123 moreUse of Out-of-range Pointer Offset in Audio7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf7.0 High
- deis workflow managerDeis Workflow Manager race condition4.6 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +14 more +16 moreKernel: gsm multiplexing race condition leads to privilege escalation7.0 High
- debian linux, mozilla firefox, firefox esr +1 more +3 moreWhen resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be...5.3 Medium
- linotp, linotp virtual appliance +1 moreDefective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote...6.8 Medium
- asterisk, sangoma certified asterisk +1 moreAsterisk susceptible to Denial of Service via DTLS Hello packets during call initiation7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1380 firmware +4 more +6 moreA race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200,...4.0 Medium
- google androidthere is a possible use after free due to a race condition. This could lead to local escalation...6.4 Medium
- Show moreLoading…