CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Projected File System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Shell Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Server Update Service (WSUS) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Push Notifications Elevation of Privilege Vulnerability8.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreApplocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege Vulnerability7.8 High
- linux, linux kernel, red hat enterprise linux 10 +11 more +13 morenet: bonding: fix use-after-free in bond_xmit_broadcast()7.8 High
- huawei harmonyosRace condition vulnerability in the power consumption statistics module. Impact: Successful...6.3 Medium
- huawei harmonyosRace condition vulnerability in the thermal management module. Impact: Successful exploitation of...6.3 Medium
- huawei harmonyosUAF vulnerability in the communication module. Impact: Successful exploitation of this...4.1 Medium
- huawei harmonyosUAF vulnerability in the communication module. Impact: Successful exploitation of this...4.7 Medium
- huawei harmonyosUAF vulnerability in the screen management module. Impact: Successful exploitation of this...2.5 Low
- huawei harmonyosUAF vulnerability in the communication module. Impact: Successful exploitation of this...7.3 High
- huawei harmonyosRace condition vulnerability in the event notification module. Impact: Successful exploitation of...2.2 Low
- huawei harmonyosRace condition vulnerability in the notification service. Impact: Successful exploitation of this...1.9 Low
- ajenti, ajenti plugin core +1 moreajenti.plugin.core has a race conditions in 2FA6.9 Medium
- canonical jujuJuju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map6.1 Medium
- openclawOpenClaw < 2026.4.4 - Rate-Limit Bypass via Concurrent Async Authentication Attempts6.3 Medium
- google chromeRace in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who...9.8 Critical
- google chromeRace in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially...6.8 Medium
- google chromeRace in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain...5.3 Medium
- @clerk backendRemnawave Backend has a race condition in HWID device limit allows bypassing max devices5.0 Medium
- apache kafka, apache software foundation kafka clients +1 moreApache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition8.7 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor...7.0 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +8 more +10 moreAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor...7.0 High
- linux, linux kernel +1 moredrm/imagination: Synchronize interrupts before suspending the GPU4.7 Medium
- linux, linux kernel +1 moredrm/xe: Open-code GGTT MMIO access protection7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moresoc: fsl: qbman: fix race condition in qman_destroy_fq4.7 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morePM: runtime: Fix a race condition related to device removal4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()9.8 Critical
- linux, linux kernel +1 morenet/mlx5e: Prevent concurrent access to IPSec ASO context4.7 Medium
- linux, linux kernel +1 morenet/mlx5e: Fix race condition during IPSec ESN update7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremtd: rawnand: serialize lock/unlock against other NAND operations7.1 High
- apple macosA race condition was addressed with additional validation. This issue is fixed in macOS Sequoia...7.5 High
mcp-handlernpmmcp-handler has a tool response leak across concurrent client sessions ('Race Condition')7.1 Highgithub.com/netbirdio/netbirdGoNetBird has Race Condition on UpdateUser Function, Resulting in Privilege Escalation From Admin to Owner4.4 Medium- steveiliop56 tinyauthTinyauth has OAuth account confusion via shared mutable state on singleton service instances7.7 High
- lakeside software systrack agentLakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant Local Privilege...7.4 High
- linux, linux kernel +1 moreapparmor: fix race on rawdata dereference7.8 High
- linux, linux kernel +1 moreapparmor: fix race between freeing data and fs accessing it7.8 High
- parse-community parse-serverParse Server: LiveQuery protected field leak via shared mutable state across concurrent subscribers8.2 High
- 0xjacky nginx-ui, nginxui nginx ui, uozi cosy +2 moreNginx UI: Race Condition Leads to Persistent Data Corruption and Service Collapse7.1 High
- wwbn avideoAVideo Vulnerable to Wallet Balance Double-Spend via TOCTOU Race Condition in transferBalance5.3 Medium
- revelrylabs elixir-nodejselixir-nodejs has Cross-User Data Leakage or Information Disclosure due to Worker Protocol Race Condition7.1 High
- Show moreLoading…