CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- linuxfoundation everest, everest everest-core +1 moreEVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio8.2 High
- linuxfoundation everest, everest everest-core +1 moreEVerest EvseManager phase-switch path has unsynchronized shared-state access race condition4.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race7.0 High
- linuxfoundation everest, everest everest-core +1 moreEVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map4.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free4.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash4.6 Medium
- linux, linux kernel +1 moreaf_unix: Give up GC if MSG_PEEK intervened.4.7 Medium
- linux, linux kernel +1 morebridge: cfm: Fix race condition in peer_mep deletion7.8 High
- linux, linux kernel +1 morecxl: Fix race of nvdimm_bus object when creating nvdimm objects4.7 Medium
- linux, linux kernel +1 morebpf: Fix race in cpumap on PREEMPT_RT4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: annotate data-races around sk->sk_{data_ready,write_space}4.7 Medium
- linux, linux kernel +1 morebpf: Fix race in devmap on PREEMPT_RT7.0 High
- apple macosA race condition was addressed with additional validation. This issue is fixed in macOS Sequoia...8.1 High
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...5.1 Medium
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...8.1 High
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...5.1 Medium
- n2w backup\& recoveryIn N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in...9.0 Critical
- nvidia triton inference serverNVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal...7.5 High
- nvidia triton inference serverNVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker...7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreRace condition, use-after-free in the Graphics: WebRender component7.5 High
- netscaler adc, gateway +1 moreRace Condition leading to User Session Mixup7.7 High
- effect-ts effectEffect Bug: `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPC7.4 High
- linux, linux kernel +1 moreio_uring: ensure ctx->rings is stable for task work flags manipulation7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremacvlan: observe an RCU grace period in macvlan_common_newlink() error path7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreperf: Fix __perf_event_overflow() vs perf_remove_from_context() race7.8 High
- linux, linux kernel +1 moreperf/core: Fix refcount bug and potential UAF in perf_mmap7.8 High
- heartcombo deviseDevise has a confirmable "change email" race condition that permits user to confirm email they have no access to6.0 Medium
- nyariv sandboxjsSandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)4.8 Medium
- subrata mal terawallet – for woocommerceWordPress TeraWallet – For WooCommerce plugin <= 1.5.15 - Race Condition vulnerability6.5 Medium
- parse-community parse-serverParse Server OAuth2 adapter shares mutable state across providers via singleton instance9.1 Critical
- blue-b alienbinAlienbin: TTL Index Race Condition allows unauthorized deletion of other users data7.1 High
- syliusSylius has a Promotion Usage Limit Bypass via Race Condition8.2 High
- linux, linux kernel +1 moretls: Fix race condition in tls_sw_cancel_work_tx()9.8 Critical
- linux, linux kernel +1 moreespintcp: Fix race condition in espintcp_close()7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +13 more +15 moreWindows Kerberos Security Feature Bypass Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Device Association Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Device Association Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows Graphics Component Elevation of Privilege Vulnerability7.0 High
- huawei harmonyosRace condition vulnerability in the device security management module. Impact: Successful...4.7 Medium
- huawei harmonyosRace condition vulnerability in the permission management service. Impact: Successful...6.6 Medium
- huawei harmonyosRace condition vulnerability in the maintenance and diagnostics module. Impact: Successful...4.4 Medium
- huawei harmonyosRace condition vulnerability in the security control module. Impact: Successful exploitation of...4.0 Medium
- huawei harmonyosRace condition vulnerability in the printing module. Impact: Successful exploitation of this...5.9 Medium
- huawei harmonyosRace condition vulnerability in the printing module. Impact: Successful exploitation of this...6.2 Medium
- openclawOpenClaw < 2026.2.19 - Race Condition in Sandbox Registry Write Operations2.0 Low
- djangoproject djangoPotential incorrect permissions on newly created file system objects3.7 Low
- olivetinOliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handling7.5 High
- arm c1 pro, c1-pro firmware +1 moreAn issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a...3.6 Low
- Show moreLoading…