CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows TCP/IP Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Native WiFi Miniport Driver Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows TCP/IP Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Print Spooler Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWin32k Elevation of Privilege Vulnerability7.0 High
- hahwul dalfoxDalfox: Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode)7.5 High
- ivanti secure access clientA race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user...7.8 High
- apple ipados, macos, visionos +2 more +4 moreA race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and...4.7 Medium
- apple ipados, macos, tvos +4 more +6 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...4.7 Medium
- apple macosA race condition was addressed with improved handling of symbolic links. This issue is fixed in...7.5 High
- apple ipados, macos, tvos +3 more +5 moreA race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and...7.5 High
- apple ipados, macos, tvos +4 more +6 moreA race condition was addressed with additional validation. This issue is fixed in iOS 26.5 and...5.5 Medium
- apple macosA race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26...4.7 Medium
- free5gcfree5GC: BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions6.5 Medium
- linux, linux kernel +1 morenvme-pci: Fix race bug in nvme_poll_irqdisable()4.7 Medium
- linux, linux kernel +1 morecgroup: fix race between task migration and iteration4.7 Medium
- linux, linux kernel +1 moreusb: yurex: fix race in probe4.7 Medium
- linux, linux kernel +1 morescsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend4.7 Medium
- linux, linux kernel +1 moredrm/amdgpu: Fix use-after-free race in VM acquire7.8 High
- linux, linux kernel +1 moreio_uring/kbuf: check if target buffer list is still legacy on recycle7.8 High
- linux, linux kernel +1 morei3c: mipi-i3c-hci: Fix race in DMA ring dequeue7.8 High
- linux, linux kernel +1 moreusb: gadget: f_rndis: Protect RNDIS options with mutex4.7 Medium
- gotenbergGotenberg: Unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine7.5 High
- google chromeRace in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had...5.3 Medium
- google chromeRace in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had...3.1 Low
- google chromeRace in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to...7.5 High
- linux, linux kernel +1 morescsi: ufs: core: Flush exception handling work when RPM level is zero4.7 Medium
- linux, linux kernel +1 moresmb: client: prevent races in ->query_interfaces()8.8 High
- linux, linux kernel +1 morecifs: Fix locking usage for tcon fields8.8 High
- linux, linux kernel +1 moreKVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()7.8 High
- linux, linux kernel +1 morenet/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query7.5 High
- linux, linux kernel, red hat enterprise linux 10 +14 more +16 moretcp: fix potential race in tcp_v6_syn_recv_sock()9.8 Critical
- linux, linux kernel +1 morenet: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode7.8 High
- linux, linux kernel +1 moremd/bitmap: fix GPF in write_page caused by resize race4.7 Medium
- linux, linux kernel +1 moreio_uring/zcrx: fix user_ref race between scrub and refill paths4.7 Medium
- linux, linux kernel +1 morerpmsg: core: fix race in driver_override_show() and use core helper7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: ctnetlink: ensure safe access to master conntrack7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: roccat: fix use-after-free in roccat_report_event7.8 High
- parse-community parse-serverParse Server: MFA SMS one-time password accepted twice under concurrent login2.1 Low
- chatchat-space langchain-chatchatchatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou2.1 Low
- prefecthq prefectPrefectHQ prefect Webhook/Notification validate_restricted_url toctou2.3 Low
- linux, linux kernel +1 morempls: add seqcount to protect the platform_label{,s} pair7.1 High
- linux, linux kernel +1 moreBluetooth: SCO: fix race conditions in sco_sock_connect()7.8 High
- linux, linux kernel +1 moreBluetooth: hci_conn: fix potential UAF in set_cig_params_sync7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreiio: gyro: mpu3050: Move iio_device_register() to correct location7.8 High
- linux, linux kernel +1 morecomedi: dt2815: add hardware detection to prevent crash4.7 Medium
- linux, linux kernel +1 morethermal: core: Address thermal zone removal races with resume7.8 High
- linux, linux kernel +1 moreusb: gadget: u_ether: Fix race between gether_disconnect and eth_stop4.7 Medium
- Show moreLoading…