CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Win32k Elevation of Privilege Vulnerability8.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows USB Print Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreUniversal Print Management Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreMicrosoft Windows App Store Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWindows App Package Installer Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreMicrosoft Windows App Store Elevation of Privilege Vulnerability8.1 High
- linux, linux kernel +1 morexfs: resample the data fork mapping after cycling ILOCK7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS8.2 High
- google chromeRace in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had...8.3 High
- honohono/jsx does not isolate context per request, leading to cross-request data disclosure6.5 Medium
- freerdpFreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback8.3 High
- better-auth, better-auth better auth, better-auth\/oauth-provider +2 moreBetter Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemption7.6 High
- @better-auth oauth-provider, better-auth, better-auth better auth +1 more +3 moreBetter Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking8.1 High
- linux, linux kernel +1 moreaf_unix: Set gc_in_progress to true in unix_gc().7.1 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability4.2 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: use chan timer to close channels in cleanup_listen()8.8 High
- patrickhener goshsgoshs: Share-link ?token=… redemption races past download limit5.9 Medium
- surrealdbSurrealDB before 3.1.0 Privilege Escalation via RPC Session Race Condition9.2 Critical
- linux, linux kernel +1 morearm64: errata: Mitigate TLBI errata on various Arm CPUs8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moresignal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()4.7 Medium
- dassault systèmes biovia workbookRace Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 20268.1 High
- google chromeRace in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...4.2 Medium
- google chromeRace in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross...6.5 Medium
- google chromeRace in WebRTC in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to...6.5 Medium
- google chromeRace in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to...4.2 Medium
- google chromeRace in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised...9.6 Critical
- google chromeRace in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain...5.3 Medium
- paymenterPaymenter: Race condition in payWithCredit() enables credit double-spend5.3 Medium
- zephyrproject zephyrRFCOMM session-disconnect race leaks session/L2CAP and denies further RFCOMM service in Zephyr Bluetooth Classic3.1 Low
- apple ipados, macos, tvos +3 more +5 moreA race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2...4.7 Medium
- antlr antlr4antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObject toctou2.0 Low
- dell display and peripheral managerDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent...6.7 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm cache policy smq: check allocation under invalidate lock7.8 High
- linux, linux kernel +1 moretcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: timer: Fix UAF at snd_timer_user_params()7.8 High
- linux, linux kernel +1 morepowerpc/64s: Fix unmap race with PMD migration entries4.7 Medium
- linux, linux kernel +1 morebpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path7.8 High
- linux, linux kernel +1 morenet: bcmgenet: fix racing timeout handler9.8 Critical
- linux, linux kernel +1 moreBluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER8.8 High
- linux, linux kernel +1 moresctp: disable BH before calling udp_tunnel_xmit_skb()7.5 High
- linux, linux kernel +1 moredm cache policy smq: fix missing locks in invalidating cache blocks7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morequota: Fix race of dquot_scan_active() with quota deactivation7.8 High
- linux, linux kernel +1 moregfs2: add some missing log locking9.8 Critical
- linux, linux kernel +1 moreum: Fix potential race condition in TLB sync7.8 High
- linux, linux kernel +1 moreice: fix race condition in TX timestamp ring cleanup4.7 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moresched/psi: fix race between file release and pressure write7.8 High
- linux, linux kernel +1 morenetfilter: nf_tables: join hook list via splice_list_rcu() in commit phase7.1 High
- linux, linux kernel +1 morebonding: 3ad: implement proper RCU rules for port->aggregator7.8 High
- Show moreLoading…