CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- adguard adguardhomeAdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle6.3 Medium
- linux, linux kernel +1 morecoresight: tmc-etr: Fix race condition between sysfs and perf mode4.7 Medium
- No product listedOpen5GS NGAP Handover gmm-sm.c gmm_state_security_mode race condition2.3 Low
- extreme networks platform oneExtremeCloud IQ Cross Tenant Data Exposure via Extreme Platform One Authentication Race Condition6.3 Medium
- gotenbergGotenberg: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')7.5 High
- google chromeRace in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute...7.5 High
- google chromeRace in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to...3.1 Low
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: rsi: fix kthread lifetime race between self-exit and external-stop4.7 Medium
- linux, linux kernel +1 moreALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger7.8 High
- linux, linux kernel, red hat enterprise linux 10 +7 more +9 morewifi: mac80211: drop stray 'static' from fast-RX rx_result8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremptcp: pm: ADD_ADDR rtx: fix potential data-race9.8 Critical
- linux, linux kernel +1 morenvmet-tcp: fix race between ICReq handling and queue teardown9.8 Critical
- mcdope pam usbpam_usb: strtok() race condition in multi-threaded PAM hosts can corrupt deny_remote result6.3 Medium
- mcdope pam usbpam_usb: Thread-unsafe static pointer in log.c causes data race under concurrent PAM authentication5.7 Medium
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a security bypass vulnerability4.4 Medium
- linux, linux kernel +1 moremedia: amphion: Fix race between m2m job_abort and device_run7.8 High
- linux, linux kernel +1 moremm/damon/core: fix damon_call() vs kdamond_fn() exit race4.7 Medium
- linux, linux kernel +1 moremm: fix deferred split queue races during migration4.7 Medium
- linux, linux kernel +1 moremm/damon/core: fix damos_walk() vs kdamond_fn() exit race4.7 Medium
- linux, linux kernel +1 morehwrng: core - use RCU and work_struct to fix race condition4.7 Medium
- linux, linux kernel +1 moreiommu/vt-d: Fix race condition during PASID entry replacement8.8 High
- linux, linux kernel +1 moreiommu/vt-d: Clear Present bit before tearing down context entry7.5 High
- linux, linux kernel +1 moreext4: fix e4b bitmap inconsistency reports7.8 High
- linux, linux kernel +1 moreRDMA/rxe: Fix race condition in QP timer handlers7.8 High
- linux, linux kernel +1 morexfrm: fix ip_rt_bug race in icmp_route_lookup reverse path4.7 Medium
- linux, linux kernel +1 moreiommu/vt-d: Clear Present bit before tearing down PASID entry7.8 High
- linux, linux kernel +1 moreiommu/vt-d: Flush cache for PASID table before using it7.8 High
- linux, linux kernel +1 moreaccel/amdxdna: Fix race condition when checking rpm_on4.7 Medium
- apple macosA race condition was addressed with additional validation. This issue is fixed in macOS Sequoia...7.0 High
- prolix-oc lumiverseLumiverse: Sign-up nonce race condition allows unauthorized account registration4.8 Medium
- nvidia geforce, gpu display driver, guest driver +3 more +5 moreNVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could...4.7 Medium
- xyproto algernonAlgernon: Race Condition in handle() shared LState8.2 High
- imagemagickImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking4.1 Medium
- mattermost, mattermost server +1 morePersistent notification timing attack causing server denial of service6.5 Medium
- svelte sveltekit, sveltejs kit +1 moreSvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclosure via query.batch5.9 Medium
- netatalkNon-reentrant privilege toggle3.9 Low
- hackerone rubyAn issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in...8.1 High
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreSIG(0) validation during query flood may lead to undefined behavior7.5 High
- axllent mailpitMailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)5.9 Medium
- sparx systems pro cloud serverRace Condition in Sparx Pro Cloud Server7.7 High
- netbsd srcNetBSD cryptodev Race Condition Double-Free via cryptodev_op()5.7 Medium
- shopperdotcom shopperShopper: Race condition on Discount.usage_limit allows silent over-redemption5.9 Medium
- emqxEMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition2.3 Low
- huawei harmonyosPermission control vulnerability in the web. Impact: Successful exploitation of this...8.4 High
- openwebui open webui, open-webui +1 moreOpen WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts8.1 High
- google chromeRace in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...8.3 High
- grafana, grafana oss +1 moreViewer-triggered race condition in Grafana Live leads to complete server crash6.5 Medium
- palo alto networks prisma browserPrisma Browser: Access and Data Rule Bypass5.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- Show moreLoading…