CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Bluetooth Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows TCP/IP Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreConnected User Experiences and Telemetry Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DNS Denial of Service Vulnerability5.9 Medium
- arm ltd 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver allows denial of service or disclosure of sensitive information7.7 High
- xenx86: DMs may cause mem leak by IRQ binding6.5 Medium
- ramon-victor freegpt-webuiramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race condition6.3 Medium
- jofpin trapejofpin trape Telemetry Endpoint user.py race condition6.3 Medium
- google androidIn multiple functions of alloc.c, there is a possible unauthorized read/write access due to a...7.0 High
- google androidIn google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a...7.0 High
- google androidIn ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could...7.0 High
- google androidIn multiple locations, there is a possible use-after-free due to a race condition. This could...7.0 High
- google androidIn multiple locations, there is a possible time-of-check to time-of-use due to a race condition....6.7 Medium
- google androidIn trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race...7.0 High
- google androidIn multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race...6.4 Medium
- google androidIn multiple locations, there is a possible use-after-free due to a race condition. This could...6.4 Medium
- google androidIn handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race...6.4 Medium
- google androidIn bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race...6.4 Medium
- google androidIn multiple locations, there is a possible use-after-free due to a race condition. This could...8.8 High
- kamailioAn issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via...7.5 High
- google androidIn multiple locations, there is a possible use after free due to a race condition. This could...7.5 High
- zephyrproject zephyrI3C IBI work-node free-list data race between ISR and workqueue thread3.1 Low
- vastsa filecodeboxvastsa FileCodeBox Pickup Limit views.py update_file_usage race condition6.9 Medium
- macrozheng mallmacrozheng mall Order Submission submit race condition2.3 Low
- free5gcfree5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI7.5 High
- expressjs multermulter vulnerable to file size limit bypass via async fileFilter race condition3.7 Low
- microsoft edge chromium, edge (chromium-based), edge for android +4 more +6 moreCopilot Chat (Microsoft Edge) Information Disclosure Vulnerability4.4 Medium
- spring integration, vmware spring integration +1 morefluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction8.2 High
- spring integration, vmware spring integration +1 moreShared JSR-223 ScriptEngine evaluated concurrently without THREADING check4.2 Medium
- crossplane crossplane-runtimecrossplane crossplane-runtime ImageConfig client.go Get toctou6.9 Medium
- No product listedA null pointer dereference vulnerability exists in the server-side session management logic of...7.5 High
- freebsdKernel use-after-free via tty ioctls7.0 High
- No product listedAn issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a...7.5 High
- google chromeRace condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an...7.5 High
- google chromeRace condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeRace condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute...7.5 High
- google chromeRace condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...6.5 Medium
- google chromeRace condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...7.5 High
- google chromeRace condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who...4.3 Medium
- google chromeRace condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeRace condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.3 High
- torproject torTor before 0.4.9.11 is prone to a race condition where in just the right circumstances a...8.9 High
kcl-libcrates.io,zoo-kclPyPI +1 moreZoo Design Studio: Memory-corruption in memory handling of lib-kcl6.9 Medium- open-telemetry opentelemetry-goOpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access5.9 Medium
- hcl software iemHCL IntelliOps Event Management is affected by multiple security vulnerabilities.5.9 Medium
- splunk ai toolkitRace Condition during Model Upload through the REST API in Splunk AI Toolkit5.9 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Telephony Service Elevation of Privilege Vulnerability7.0 High
- rdk rdk-b webuiRDK-B WebUI race condition vulnerability8.1 High
- Show moreLoading…