CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows NTFS Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Credential Manager Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Storage Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Storage Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Autopilot Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Device Association Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Account Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreMicrosoft Windows Search Component Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows DCOM Server Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +15 more +17 moreWindows Security Center Elevation of Privilege Vulnerability6.4 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Composite Image File System Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Phone Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Performance Monitor Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Device Association Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Overlay Filter Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreMicrosoft Bluetooth Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Installer Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreActive Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +8 more +10 moreWindows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability5.6 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Storage Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Storage Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Storage Elevation of Privilege Vulnerability7.0 High
- php frankenphpFrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module7.7 High
- parse-community parse-serverParse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference8.3 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit6.0 Medium
- xengrant-table: double version change race8.8 High
- macrozheng mallmacrozheng mall Coupon Redemption generateOrder race condition2.3 Low
- mozilla firefox, thunderbird +1 moreRace condition in the Networking: DNS component4.2 Medium
- microsoft asp.net core 10.0, asp.net core 11.0, asp.net core 8.0 +3 more +5 moreASP.NET Core Elevation of Privilege Vulnerability7.5 High
- mozilla firefox, thunderbird +1 moreRace condition in the XPCOM component4.2 Medium
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Graphics: Text component4.2 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to race condition in the Networking component8.3 High
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Graphics: CanvasWebGL component4.2 Medium
- zephyrproject zephyrBluetooth Mesh delayable message queue: unsynchronized list access leads to NULL pointer dereference4.8 Medium
- pixelite events managerWordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability3.7 Low
- imagemagickImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access2.0 Low
- progress sharefile storage zones controllerUntrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller4.0 Medium
- meetecho janus-gatewaymeetecho janus-gateway VideoRoom janus_videoroom.c race condition2.3 Low
- apache cxfApache CXF: XML Signature wrapping in JAX-RS XML Security7.5 High
- apache cxfApache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests7.5 High
- zephyrproject zephyrRace condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request buffer6.7 Medium
- Show moreLoading…