CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morenet: ena: PHC: Fix potential use-after-free in get_timestamp7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morefs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling7.5 High
- linux, linux kernel +1 moreRevert "wireguard: device: enable threaded NAPI"7.5 High
- linux, linux kernel +1 morexfrm: espintcp: do not reuse an in-progress partial send7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: serialize accept_q access8.8 High
- filamentphp filamentFilament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission7.4 High
- corewcfCoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution6.2 Medium
- mcdope pam usbpam_usb: Missing O_EXCL on pad temp file creation allows concurrent update race5.8 Medium
- google androidIn Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition....10.0 Critical
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible method to remove a...10.0 Critical
- google chromeRace in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had...8.3 High
- google chromeRace in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker...8.3 High
- rockwell automation factorytalk historian seRockwell Automation FactoryTalk Historian Site Edition - Authentication Bypass9.2 Critical
- olivetinOliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination7.5 High
- nickboss iptanus file uploadIptanus File Upload < 5.1.7 - File Overwrite via Race Condition5.4 Medium
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +6 more +8 moreAbrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking7.0 High
- pilinux gorestGoRest: InMemorySecret2FA race condition allows process crash via concurrent map access5.9 Medium
- google chromeRace in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker...8.3 High
pyo3crates.ioPyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures6.3 Medium- pi-hole ftlPi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer8.8 High
- apple macos, macos monterey +1 moreA malicious application may cause unexpected changes in memory shared between processes. A memory...7.1 High
- xenx86 HVM I/O port list traversal7.9 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Push Notifications Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Push Notifications Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Push Notifications Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Push Notifications Elevation of Privilege Vulnerability7.8 High
- microsoft remote desktop client, remote desktop client for windows desktop, windows 11 version 23h2 +10 more +12 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Telephony Service Elevation of Privilege Vulnerability7.0 High
- microsoft remote desktop client, remote desktop client for windows desktop, windows 10 version 1607 +28 more +30 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability7.0 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.0 High
- linux, linux kernel +1 moredm: fix unlocked test for dm_suspended_md7.8 High
- linux, linux kernel +1 morenetfilter: nf_tables: use list_del_rcu for netlink hooks7.8 High
- linux, linux kernel +1 morenet/sched: act_ct: Only release RCU read lock after ct_ft7.8 High
- linux, linux kernel, red hat enterprise linux 10 +12 more +14 moreKVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry9.3 Critical
- arm c1-premium, c1-ultra, cortex-a710 +45 more +47 moreArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1,...9.1 Critical
- google chromeRace in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had...8.3 High
- linux, linux kernel +1 moredrm/amdgpu/userq: fix access to stale wptr mapping7.8 High
- linux, linux kernel +1 morepseries/papr-hvpipe: Fix race with interrupt handler4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: hci_uart: fix UAFs and race conditions in close and init paths7.8 High
- nocodbNocoDB: OAuth Authorization Code Race Condition6.3 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a...4.3 Medium
- google chromeRace in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker...5.3 Medium
- google chromeRace in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who...8.3 High
- Show moreLoading…