CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- bubka 2fauth 2FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU) 5.9 Medium
- jetbrains datalore In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via... 5.9 Medium
- wwbn avideo WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.php 6.0 Medium
- librespark libretv LibreTV before v2.21.2 SSRF Protection Bypass via DNS Rebinding 2.3 Low
- thalesgroup safenet authentication client service Privileged file deletion in SafeNet Authentication Client SACSrv 5.8 Medium
- ultravioletrs cocos Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks 7.2 High
- sensiolabs symfony Symfony: NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports (Incomplete Fix for CVE-2024-50342) 2.3 Low
- kyverno Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass 8.5 High
- debian apt APT RCE via hard link reuse 7.7 High
- apache software foundation zookeeper Apache ZooKeeper: ACL enforcement bypass allows unauthorized operations to commit after an ACL revocation 6.0 Medium
- zephyrproject zephyr Time-of-check/time-of-use double fetch in the Zephyr i3c_transfer() syscall handler allows kernel-mode control-flow hijack from user mode 7.0 High
- google chrome Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote... 8.8 High
- google chrome Race condition in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 5.3 Medium
- google chrome Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute... 8.8 High
- anthropics claude-code Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace 7.7 High
- wordpress, wordpress core +1 more WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution 8.1 High
- pgadmin.org pgadmin 4 pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check 7.3 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: File Manager and storage-path tools act on a different path from the one checked 7.1 High
-
github.com/charmbracelet/soft-serveGo charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users 5.9 Medium - gnome epiphany epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler 6.8 Medium
- louislam uptime-kuma Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler 6.3 Medium
- nagios host, teamviewer full client +1 more Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS 7.8 High
- spesmilo electrum Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass 9.3 Critical
- apple ipados, macos, tvos +4 more +6 more A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue... 6.5 Medium
- boneio TOCTOU Race Condition in boneIO 8.8 High
- tox-dev filelock filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database 3.3 Low
- open-reception appointment-booking-software OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent 5.4 Medium
- nodejs node A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response... 6.5 Medium
- google chrome Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 6.5 Medium
- google chrome Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a... 8.8 High
- google chrome Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- google chrome Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a... 6.5 Medium
- google chrome Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- google chrome Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- google chrome Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a... 6.5 Medium
- google chrome Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 6.5 Medium
- google chrome Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a... 8.8 High
- google chrome Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote... 9.6 Critical
- google chrome Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote... 8.8 High
- tox-dev filelock filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock 3.3 Low
- tox-dev filelock filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name 6.1 Medium
- tox-dev filelock filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders 4.7 Medium
- Show olderLoading…