CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morefunctionfs: fix the open/removal races7.8 High
- linuxnet/sched: ets: Always remove class from active list before deleting in ets_qdisc_change7.8 High
- pypa virtualenvvirtualenv Has TOCTOU Vulnerabilities in Directory Creation4.5 Medium
- tox-dev filelockfilelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock5.3 Medium
- rezmoss axios4goaxios4go's Race Condition in Shared HTTP Client Allows Proxy Configuration Leak8.2 High
- google android, mediatek, inc. mediatek chipset +1 moreIn seninf, there is a possible memory corruption due to a race condition. This could lead to...7.0 High
github.com/open-feature/flagd/coreGo,github.com/open-feature/flagd/flagdGo,github.com/open-feature/flagd/flagd-proxyGo +2 moreflagd: Multiple Go Runtime CVEs Impact Security and AvailabilityNo score- samsung exynos 1330 firmware, exynos 1380 firmware, exynos 1480 firmware +3 more +5 moreAn issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos...5.9 Medium
- samsung exynos 1330 firmware, exynos 1380 firmware, exynos 1480 firmware +3 more +5 moreAn issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos...5.1 Medium
- phpemsPHPEMS Purchase Request race condition6.3 Medium
- phpemsPHPEMS Coupon race condition2.3 Low
- opencartOpenCart Single-Use Coupon race condition6.3 Medium
- linux, linux kernel +1 moreaccel/ivpu: Fix race condition when unbinding BOs7.8 High
- apple ipados, macos, safari +5 more +7 moreA race condition was addressed with improved state handling. This issue is fixed in watchOS 26.2,...3.1 Low
- tox-dev filelockfilelock has TOCTOU race condition that allows symlink attacks during lock file creation6.3 Medium
- nvidia resiliency extensionNVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where...7.8 High
- linux, linux kernel +1 moretimers: Fix NULL function pointer race in timer_shutdown_sync()4.7 Medium
- radykal fancy product designerFancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition6.5 Medium
- apple ipados, macos, tvos +5 more +7 moreA memory corruption issue was addressed with improved lock state checking. This issue is fixed in...7.8 High
- 1panel-dev maxkbMaxKB has a Python sandbox LD_PRELOAD bypass8.8 High
- 1panel-dev maxkbMaxKB vulnerable to privilege escalation through sandbox bypass8.8 High
- okta java management sdk, okta-sdk-java +1 moreRace condition in the Okta Java SDK8.4 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Shell Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows File Explorer Elevation of Privilege Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreDirectX Graphics Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.0 High
- google androidIn multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access...7.0 High
- google androidIn multiple locations, there is a possible intent filter bypass due to a race condition. This...7.0 High
- huawei harmonyosMulti-thread race condition vulnerability in the network management module. Impact: Successful...8.4 High
- huawei harmonyosRace condition vulnerability in the network module. Impact: Successful exploitation of this...7.1 High
- huawei harmonyosRace condition vulnerability in the audio module. Impact: Successful exploitation of this...6.7 Medium
- huawei harmonyosMulti-thread race condition vulnerability in the camera framework module. Impact: Successful...5.1 Medium
- huawei harmonyosMulti-thread race condition vulnerability in the camera framework module. Impact: Successful...5.1 Medium
- huawei harmonyosMulti-thread race condition vulnerability in the camera framework module. Impact: Successful...5.1 Medium
- google chromeRace in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially...7.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6899, mt6980d, mt6983, mt6985, mt6989, mt6990, mt6991, mt8113, mt8115, mt8139, mt8163, mt8168, mt8169, mt8183, mt8186, mt8188, mt8512, mt8516, mt8518, mt8519, mt8532, mt8676, mt8678, mt8695, mt8696, mt8698 +1 more +3 moreIn aee daemon, there is a possible system crash due to a race condition. This could lead to local...4.7 Medium
- google androidIn bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use...7.4 High
- google androidIn PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race...7.0 High
- huawei harmonyosDenial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of...5.3 Medium
- huawei harmonyosDoS vulnerability in the video-related system service module. Impact: Successful exploitation of...7.3 High
- huawei harmonyosUAF vulnerability in the screen recording framework module. Impact: Successful exploitation of...8.4 High
- google cloud lookerRemote Code Execution in Looker due to Improperly Validated Directory Deletion7.1 High
- eclipse jerseyRace Condition allows Bypass of Trust Restrictions9.4 Critical
- linux, linux kernel +1 moreBluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work5.5 Medium
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreDirectX Graphics Kernel Denial of Service Vulnerability6.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +12 more +14 moreMicrosoft Wireless Provisioning System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +12 more +14 moreMicrosoft Wireless Provisioning System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Speech Recognition Elevation of Privilege Vulnerability7.0 High
- Show moreLoading…