CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- avast antivirus, nortonlifelock (gendigital) avg antivirus, avg anti-virus +2 moreAvast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) ...6.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local File Deletion Vulnerability6.3 Medium
- fortinet forticlient, forticlientwindows +1 moreMultiple vulnerabilities including an incorrect permission assignment for critical resource [CWE...7.3 High
- qualcomm ar8035 firmware, qca6391 firmware, qca6595au firmware +40 more +42 moreTime-of-check time-of-use race condition in Modem7.5 High
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...9.4 Critical
- tesla model 3, model 3 firmware, model s firmware +2 more +4 moreThis vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles...7.6 High
- containers podman, redhat enterprise linux +1 morePodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 Medium
- zoom meetings, zoom video communications inc client for meetings for it admin windows installers +1 moreLocal Privilege Escalation in Zoom for Windows Installers7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Graphics Component Elevation of Privilege Vulnerability7.0 High
- microsoft malware protection engineMicrosoft Defender Elevation of Privilege Vulnerability6.3 Medium
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +138 more +140 moreTime-of-check time-of-use race condition in Core9.3 Critical
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8173, mt8532, mt8666, mt8667, mt8788, yoctoproject yocto +2 moreIn ion, there is a possible escalation of privilege due to improper locking. This could lead to...6.4 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn adsp, there is a possible escalation of privilege due to a logic error. This could lead to...4.1 Medium
- apple ipados, macos, tvos +3 more +5 moreA race condition was addressed with additional validation. This issue is fixed in macOS Ventura...5.9 Medium
remove_dir_allcrates.ioRace Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_allNo score- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- hp inc. pc products using ami uefi firmware, hp 218 pro g5 mt firmware, 260 g2 desktop mini firmware +23 more +25 moreA potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP...7.0 High
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r10 firmware +237 more +239 moreDell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious...7.5 High
- hp dragonfly folio g3 2-in-1 firmware, elite dragonfly firmware, elite dragonfly g2 firmware +315 more +317 moreA potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS...7.0 High
- trendmicro maximum security 2022, trend micro, inc. micro maxium security (consumer) +1 moreA vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user...7.0 High
- juniper junos os evolvedJunos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of Service6.1 Medium
- amd 2nd gen epyc, 3rd gen epyc, epyc 7002 firmware +49 more +51 moreTOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially...5.7 Medium
- amd cezannepi-fp6 firmware, comboam4v2 pi firmware, renoirpi-fp6 firmware +2 more +4 moreA TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a...4.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability7.8 High
- zoom rooms, zoom video communications inc rooms for windows +1 moreLocal Privilege Escalation in Zoom Rooms for Windows Clients7.8 High
- zoom rooms, zoom video communications inc rooms for macos +1 moreLocal Privilege Escalation in Zoom Rooms for macOS Clients8.8 High
- qualcomm sd888 5g firmware, wcd9380 firmware, wcd9385 firmware +5 more +7 moreTime-of-check Time-of-use Race Condition in Multimedia Framework6.7 Medium
- google android, mediatek, inc. mt6781, mt6833, mt6853, mt6855, mt6873, mt6877, mt6885, mt6893, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn isp, there is a possible out of bounds write due to a race condition. This could lead to local...6.4 Medium
- wordpressWP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability8.1 High
- google android, samsung mobile devices +1 moreTOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022...6.9 Medium
- technowich wp ulike, wp ulike (wordpress plugin) +1 moreWordPress WP ULike Plugin <= 4.6.4 is vulnerable to Race Condition vulnerability5.3 Medium
- arm utgard gpu kernel driverAn Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged...7.5 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreA Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service...7.0 High
- frroutingIn FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root...6.7 Medium
- insyde kernelIn UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB...7.5 High
- insyde insydeh2oDMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe...7.8 High
- insyde kernelDMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI handler could...6.4 Medium
- Show moreLoading…