CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeRace in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local...7.4 High
- ggml llama.cppllama.cpp b7492–b9060 Use-After-Free RCE via llama-server9.2 Critical
- ggml llama.cppllama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp7.3 High
- linuxxfrm: fix sk_dst_cache double-free in xfrm_user_policy()7.8 High
- nvidia dynamoNVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition...6.5 Medium
- tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +113 more +115 moreDevice Provisioning Race Condition in TP-Link Omada Adoption Workflow5.8 Medium
- bytecodealliance wasmtimeWasmtime: Preemption and traps during bulk operations enable breaking internal VM state2.0 Low
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreOCPP Firmware download is not properly locked6.9 Medium
- asus armoury crateConcurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in...7.3 High
- google chromeRace in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote...6.5 Medium
- google chromeRace in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to...7.0 High
- google chromeRace in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary...7.5 High
- google chromeRace in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had...9.6 Critical
- google chromeRace in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker...6.5 Medium
- google chromeRace in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker...6.5 Medium
- google chromeRace in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker...4.2 Medium
- google chromeRace in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute...8.8 High
- google chromeRace in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...9.6 Critical
- google chromeRace in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...9.6 Critical
- google chromeRace in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to...7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreposix-cpu-timers: Prevent UAF caused by non-leader exec() race7.8 High
- xenevtchn: Race between FIFO expand and reset7.3 High
- xenx86: Out-of-bounds read in vRTC emulation7.5 High
- xenvNUMA domain cleanup may race other operations6.5 Medium
- xengrant-table: version change racing with other operations6.5 Medium
- xengrant-table: version change racing with other operations6.5 Medium
- apple ipados, macos, watchos +2 more +4 moreA race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and...9.8 Critical
- apple macosA race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8...9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreA race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and...9.8 Critical
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...7.0 High
- apple macos, tvos +1 moreA race condition was addressed with additional validation. This issue is fixed in macOS Sequoia...4.7 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26...7.5 High
- apple ipados, ios and ipados, iphone os +2 moreA race condition was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS...4.7 Medium
- apple macosA race condition was addressed with improved state management. This issue is fixed in macOS...7.0 High
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...4.7 Medium
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia...7.0 High
- zephyrproject zephyrSMP race in `thread_idx_alloc()` lets concurrent `k_object_alloc(K_OBJ_THREAD)` callers share a kernel-object permission slot6.5 Medium
- linux, linux kernel +1 moreiio: event: Fix event FIFO reset race7.1 High
- linux, linux kernel +1 moreaudit: Fix data races of skb_queue_len() readers on audit_queue8.2 High
- linux, linux kernel +1 moremm: shrinker: fix shrinker_info teardown race with expansion7.8 High
- linux, linux kernel +1 morewriteback: fix race between cgroup_writeback_umount() and inode_switch_wbs()7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreproc: protect ptrace_may_access() with exec_update_lock (FD links)7.8 High
- linux, linux kernel +1 morecpufreq: Fix hotplug-suspend race during reboot4.7 Medium
- linux, linux kernel +1 moreKVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits7.1 High
- linux, linux kernel +1 moreKVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morei2c: core: fix adapter deregistration race7.8 High
- linux, linux kernel +1 morefuse: re-lock request before returning from fuse_ref_folio()7.8 High
- linux, linux kernel +1 morefuse-uring: Avoid queue->stopped races and set/read that value under lock7.8 High
- linux, linux kernel +1 morenet/mlx5e: xsk: Fix unlocked writing to ICOSQ7.5 High
- linux, linux kernel +1 moreKVM: x86: Check for invalid/obsolete root *after* making MMU pages available8.8 High
- Show moreLoading…