CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn VPU, there is a possible use-after-free read due to a race condition. This could lead to local...2.9 Low
- google androidIn vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This...7.4 High
- google androidIn multiple functions of Nfc.h, there is a possible use after free due to a race condition. This...7.0 High
- google androidIn multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to...7.4 High
- google androidIn multiple locations, there is a possible lockscreen bypass due to a race condition. This could...7.4 High
- mozilla firefox, thunderbird +1 moreRace condition in the JavaScript: GC component4.2 Medium
- opensiftOpenSift: Race-prone local persistence could cause state corruption/loss6.6 Medium
- linux, linux kernel +1 morebonding: annotate data-races around slave->last_rx4.7 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +2 moresmb: client: split cached_fid bitfields to avoid shared-byte RMW races8.8 High
- linux, linux kernel +1 morescsi: qla2xxx: Delay module unload while fabric scan in progress5.5 Medium
- linux, linux kernel +1 moremd: suspend array while updating raid_disks via sysfs5.3 Medium
- jm33-m0 emp3r0remp3r0r Affected by Concurrent Map Access DoS (panic/crash)7.0 High
- linux, linux kernel +1 moreice: Fix PTP NULL pointer dereference during VSI rebuild4.7 Medium
- linux, linux kernel +1 morespi: tegra210-quad: Protect curr_xfer check in IRQ handler4.7 Medium
- linux, linux kernel +1 morespi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer5.5 Medium
- linux, linux kernel +1 moreALSA: aloop: Fix racy access at PCM trigger7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()7.8 High
- linux, linux kernel +1 moremptcp: fix race in mptcp_pm_nl_flush_addrs_doit()7.8 High
- linux, linux kernel +1 morenfc: nci: Fix race between rfkill and nci_unregister_device().4.7 Medium
- linux, linux kernel +1 moremm/shmem, swap: fix race of truncate and swap entry split7.3 High
- linux, linux kernel +1 morefirewire: core: fix race condition against transaction list4.7 Medium
- linux, linux kernel +1 morenvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference7.5 High
- linux, linux kernel +1 morenetdevsim: fix a race issue related to the operation on bpf_bound_progs list4.7 Medium
- linux, linux kernel +1 moreipv6: annotate data-race in ndisc_router_discovery()5.5 Medium
- linux, linux kernel +1 moremISDN: annotate data-race around dev->work5.5 Medium
- linux, linux kernel +1 morel2tp: avoid one data-race in l2tp_tunnel_del_work()5.5 Medium
- linux, linux kernel +1 morerxrpc: Fix data-race warning and potential load/store tearing4.7 Medium
- linux, linux kernel +1 moreserial: Fix not set tty->port race condition4.7 Medium
- apple ipados, macos, tvos +4 more +6 moreA race condition was addressed with improved state handling. This issue is fixed in watchOS 26.3,...7.0 High
- apple ipados, macos, visionos +2 more +4 moreA race condition was addressed with improved handling of symbolic links. This issue is fixed in...9.0 Critical
- google chromeRace in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced...7.5 High
medusaUbuntuA race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage...8.1 High- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h3 +14 more +16 moreWindows Subsystem for Linux Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.0 High
- No product listedRace condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a...5.6 Medium
- No product listedRace condition for some TDX Module within Ring 0: Hypervisor may allow an escalation of privilege...8.4 High
- sap commerce cloudRace condition vulnerability in SAP Commerce Cloud5.9 Medium
- huawei harmonyosUAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this...8.4 High
- lfprojects mcp typescript sdk, modelcontextprotocol typescript-sdk, red hat ansible automation platform 2.6 +2 more@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morescsi: core: Wake up the error handler when final completions race against each other4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipvlan: Make the addrs_lock be per port7.8 High
- linux, linux kernel +1 moreleds: led-class: Only Add LED to leds_list when it is fully ready4.7 Medium
- linux, linux kernel +1 moremigrate: correct lock ordering for hugetlb file folios5.5 Medium
- linux, linux kernel +1 moreregmap: Fix race condition in hwspinlock irqsave routine4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: Fix recvmsg() unconditional requeue7.8 High
- linuxbtrfs: fix deadlock in wait_current_trans() due to ignored transaction type5.7 Medium
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF and ASM vulnerability8.2 High
- dr.buho buhocleanerBuhoCleaner 1.15.2 - Local Privilege Escalation via PID reuse attack7.3 High
- parall jspdfjsPDF has a Shared State Race Condition in addJS Plugin6.3 Medium
- Show moreLoading…