CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: jkdsd crash due to multiple telemetry requests5.3 Medium
- nettyNetty: TOCTOU in OcspServerCertificateValidator7.4 High
- catonetworks cato clientAn issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and...8.1 High
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreLGInstallService - Deletion of arbitrary files with system privilege5.0 Medium
- lapceLapce v0.2.8 - Privilege escalation via Race Condition7.3 High
- razer synapseRazer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation...7.8 High
- cisco ios xr software, ios xr +1 moreA vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated,...5.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows 11 21h2 +1 more +3 moreWindows Themes Remote Code Execution Vulnerability8.8 High
- n-able take controlBASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU...7.0 High
- unity parsecUnity Parsec before 8 has a TOCTOU race condition that permits local attackers to escalate...7.0 High
- dell alienware m15 r7 firmware, alienware m16 firmware, alienware m18 firmware +240 more +242 moreDell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated...6.9 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreSev-es / sev-snp vmgexit double fetch vulnerability5.3 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +10 more +12 moreWindows Projected File System Elevation of Privilege Vulnerability7.0 High
- qualcomm fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +29 more +31 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver6.4 Medium
- google android, mediatek mt6739, mt6761 +18 more +20 moreIn thermal, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek mt6739, mt6761 +18 more +20 moreIn thermal, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6779, mt6781, mt6785, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt8168, mt8781, mt8791, mt8797 +1 moreIn audio, there is a possible out of bounds write due to a missing bounds check. This could lead...6.4 Medium
- gitlabIncorrect Ownership Assignment in GitLab5.3 Medium
- open-xchange appsuite backend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreExternal service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use...4.3 Medium
- ibm storage protect, spectrum protect client, spectrum protect for space management +1 more +3 moreIBM Storage Protect denial of service6.2 Medium
topgradecrates.iotopgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_allNo score- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Outlook Security Feature Bypass Vulnerability8.8 High
- microsoft malware protection engineMicrosoft Defender Elevation of Privilege Vulnerability6.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Partition Management Driver Elevation of Privilege Vulnerability7.8 High
- hp inc. pc products using ami uefi firmware, hp 200 g3 firmware, 200 g4 22 all-in-one firmware +57 more +59 moreA potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP...7.0 High
- linux kernel, netapp h300s, h410c +3 more +5 morePrivilege escalation with IO_RING_OP_CLOSE in the Linux Kernel7.8 High
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5,...6.4 Medium
- trend micro apex one, trend micro, inc. micro apex one +1 moreA Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service...7.0 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreA Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service...7.0 High
- netskope, netskope client +1 moreLocal privilege escalation using log file7.0 High
- hp elite dragonfly firmware, elite dragonfly g2 firmware, elite dragonfly g3 firmware +289 more +291 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.0 High
- hp elite dragonfly firmware, elite dragonfly g2 firmware, elite dragonfly g3 firmware +289 more +291 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.0 High
- hp elite dragonfly firmware, elite dragonfly g2 firmware, elite dragonfly g3 firmware +289 more +291 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.0 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +401 more +403 morePotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS...7.8 High
- microsoft nuget, nuget 5.11.4, nuget 6.0.4 +5 more +7 moreNuGet Client Remote Code Execution Vulnerability7.1 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +385 more +387 morePotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +385 more +387 morePotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +385 more +387 morePotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP...7.8 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +385 more +387 morePotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP...7.8 High
- getvideostream videostreamVideostream macOS app 0.5.0 and 0.4.3 has a Race Condition. The Updater privileged script...7.0 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +60 more +62 moreTime-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious...5.9 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 moreA TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read...7.4 High
- docker desktopDocker Desktop for Windows before 4.6 allows attackers to overwrite any file through the...6.3 Medium
- linux kernel, debian linux, netapp h300s firmware +5 more +7 moreThe specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of...7.8 High
- avast antivirus, nortonlifelock (gendigital) avg antivirus, avg anti-virus +2 moreAvast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) ...6.5 Medium
- Show moreLoading…