CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- freebsdRace condition in ELF core dump segment counting7.4 High
- mozilla firefox, thunderbird +1 moreRace condition in the JavaScript Engine component6.8 Medium
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Graphics component4.2 Medium
- zabbixAPI and Frontend login lockout race condition6.9 Medium
- apple ipados, macos, safari +3 more +5 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...3.1 Low
- apple ipados, macos, safari +3 more +5 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...3.1 Low
- quantumnous new-apiNew API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass6.0 Medium
- azuriom cmsAzuriom CMS Money Transfer ProfileController.php transferMoney toctou2.3 Low
- linuxnet: mana: Sync page pool RX frags for CPU9.8 Critical
- linuxmac802154: remove interfaces with RCU list deletion7.8 High
- linuxpmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI7.8 High
- kunbus picontrolConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl5.9 Medium
- kunbus picontrolConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl7.3 High
- vllmvLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts6.3 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation via Race Condition on macOS4.1 Medium
- ibm datapower gateway 10.5.0, datapower gateway 10.6.0, datapower gateway 11.0.0 +1 more +3 moreIBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall4.2 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in Navigator for i4.3 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in Navigator for i6.3 Medium
- microsoft windows 10 version 1809, windows 11 version 26h1, windows server 2019 +6 more +8 moreWindows Device Health Attestation (DHA) Remote Code Execution Vulnerability8.1 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DNS Elevation of Privilege Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Telephony Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +10 more +12 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Work Folder Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Event Logging Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Telephony Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreRemote Desktop Client Remote Code Execution Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Backup Engine Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +6 more +8 moreWindows DNS Server Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Telephony Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Telephony Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 moreWindows MIDI Service Module Elevation of Privileges Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Push Notifications Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Bind Filter Driver Elevation of Privilege Vulnerability7.0 High
- zephyrproject zephyrUpdateHub: race condition on shared context causes out-of-bounds write and DoS2.5 Low
- op-tee optee osOP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT8.4 High
- linuxRDMA/siw: publish QP after initialization7.8 High
- linuxdrm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves7.8 High
- linuxdrm/xe/guc: Hold device ref until queue teardown completes7.8 High
- linuxnet/packet: avoid fanout hook re-registration after unregister7.8 High
- linuxiommu/amd: Wait for completion instead of returning early in iommu_completion_wait()8.8 High
- linuxtipc: serialize udp bearer replicast list updates7.8 High
- linuxdrm/amdgpu: Fix context pstate override handling7.8 High
- linuxdrm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()7.8 High
- linuxALSA: timer: don't re-enter an instance callback that is still running7.8 High
- linuxBluetooth: hci_sync: Protect UUID list traversal7.8 High
- linuxnet: slip: serialize receive against buffer reallocation7.8 High
- linuxnet/sched: serialize qdisc_rtab_list against concurrent get/put7.8 High
- tp-link systems inc. archer a6 v4Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A66.8 Medium
- Show moreLoading…