CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- awesomemotive easy digital downloads, easy digital downloads digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability5.9 Medium
- zephyrproject zephyrCross-session AES key confusion in the Espressif ESP32 hardware crypto driver3.7 Low
- maccmspro maccms10MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption2.3 Low
- hascheksolutions pictshareHaschekSolutions PictShare File Upload core.php architect race condition2.1 Low
- nocodbNocoDB Registration users.service.ts race condition6.3 Medium
- nocodbNocoDB Password-Reset Flow users.service.ts race condition5.1 Medium
- traefikTraefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper6.3 Medium
- zephyrproject zephyrRace condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP7.0 High
- zephyrproject zephyrRace condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air4.2 Medium
- isc bind 9Concurrent GSS-TSIG messages corrupt memory8.1 High
- apache software foundation brpcApache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service7.5 High
- tokio-rs tokioTokio: Race condition in `tokio::time::Interval`5.8 Medium
- a2aproject a2a-rsa2aproject a2a-rs inmemory.rs update race condition5.3 Medium
- google chromeMemory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...6.5 Medium
- google chromeMemory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeMemory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- @modelcontextprotocol server, modelcontextprotocol typescript-sdk +1 moreModel Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another7.7 High
- tox-dev filelockfilelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse4.7 Medium
- apache software foundation tomcatApache Tomcat: HTTP/2 request/response mix-up after error during async processing9.1 Critical
- apple ipados, macos, ios and ipados +1 more +3 moreA race condition was addressed with additional validation. This issue is fixed in iOS 27 and...7.8 High
- apple macosA race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27...4.7 Medium
- apple macosA race condition was addressed with additional validation. This issue is fixed in macOS Golden...4.7 Medium
- ibm storage ts4500 libraryTS4500 Tape Library Race Condition6.8 Medium
- apache software foundation camelApache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance5.9 Medium
- wheelsWheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true ...5.9 Medium
- freebsdMultiple vulnerabilities in bhyve device models7.0 High
- freebsdMultiple vulnerabilities in bhyve device models7.0 High
- freebsdMultiple vulnerabilities in bhyve device models7.0 High
- freebsdMemory safety bugs in kqueue copy-on-fork implementation7.0 High
- freebsdMemory safety bugs in kqueue copy-on-fork implementation7.0 High
- better-auth, better-auth drizzle-adapter, kysely-adapter +2 moreBetter Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Condition6.3 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)7.8 High
- nezhahq nezhaNezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Credential Providers Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreWindows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Embedded Mode Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows DHCP Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows Deployment Services Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Installer Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreClipboard User Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Installer Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Win32k Elevation of Privilege Vulnerability7.0 High
- Show moreLoading…