CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +160 more +162 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor8.4 High
- wordopsproject wordopsWordOps has TOCTOU race condition7.7 High
- tesla model 3, model 3 firmware +1 moreTesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability9.0 Critical
- parallels desktopParallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability7.5 High
- parallels desktopParallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecrypto: qat - resolve race condition during AER recovery7.8 High
- zscaler client connectorAnti-Tampering bypass via Repair App functionality8.8 High
fdupesDebianIn deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via...6.0 Medium- tillitis tkey-device-signer, tkey device signer +1 moreTillitis TKey Signer possible RAM disclosure vulnerability2.2 Low
- openstack storletsOpenStack Storlets arbitrary code execution vulnerability4.9 Medium
- github enterprise serverRace Condition was identified in GitHub Enterprise Server that allowed maintaining admin permissions5.5 Medium
- ivanti avalancheA Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows...8.8 High
- ivanti avalancheA Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows...8.8 High
- openstack magnum, magnum-yoga-eom +1 moreOpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability7.1 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +14 more +16 moreWindows Distributed File System (DFS) Remote Code Execution Vulnerability7.2 High
- espressif esp-idfAnti Rollback bypass with physical access and TOCTOU attack6.1 Medium
- openeuler isula, isulad +1 moreTOCTOU Race Condition problem in iSulad7.0 High
- No product listedRace condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to...7.2 High
- zoom rooms, zoom video communications, inc. rooms client for windows +1 moreZoom Rooms Client for Windows - Race Condition5.3 Medium
- dell emc xc core xc450 firmware, emc xc core xc650 firmware, emc xc core xc6520 firmware +56 more +58 moreDell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition...5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Print Spooler Elevation of Privilege Vulnerability7.0 High
- nixos nixNix Corruption of fixed-output derivations6.3 Medium
- openbsdOpenBSD 7.4 pf state race condition kernel crash6.2 Medium
- linux, linux kernel +1 moreHID: logitech-hidpp: Fix kernel crash on receiver USB disconnect8.8 High
- sgi performance co-pilot, red hat enterprise linux 6, enterprise linux 7 +3 more +5 morePcp: unsafe use of directories allows pcp to root privilege escalation6.0 Medium
- gradio-app gradio-app/gradio, gradio project gradio +1 moreTiming Attack Vulnerability in gradio-app/gradio5.9 Medium
- mozilla focus for ios, firefox focus +1 moreAn attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI...8.1 High
- freebsdPotential jail escape vulnerabilities in netmap7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows Kernel Security Feature Bypass Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +47 more +49 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment7.8 High
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS...7.0 High
- buildkite elastic ci stackBuildkite Elastic CI for AWS time-of-check-time-of-use race condition vulnerability7.0 High
- github enterprise serverRace Condition allows Administrative Access on Organization Repositories6.3 Medium
- github enterprise serverRace Condition allows Unauthorized Outside Collaborator5.8 Medium
- github enterprise serverA race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on...3.9 Low
- quicoto thumbs ratingWordPress Thumbs Rating Plugin <= 5.0.0 is vulnerable to Race Condition5.3 Medium
- insyde insydeh2oTOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29,...4.7 Medium
- samsung mobile exynos, samsung exynos 1080 firmware, exynos 1280 firmware +5 more +7 moreA TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos...6.3 Medium
- dashlabsltd yasr – yet another star rating plugin for wordpress, yet another stars rating project another stars rating +1 moreWordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition3.7 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...3.3 Low
- avast avg antivirus, avast/avg antivirus +1 moreTime-of-check to time-of-use (TOCTOU) bug leads to full local privilege escalation.8.2 High
- foodcoopshopFoodCoopShop Server-Side Request Forgery vulnerability8.1 High
- lenovo vantage hardwarescan plugin, hardware scan addin, hardware scan plugin +1 more +3 moreA denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3...6.1 Medium
- lenovo vantage systemupdate plugin, hardware scan addin, hardware scan plugin +1 more +3 moreA privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin...7.8 High
- lenovo vantage systemupdate plugin, hardware scan addin, hardware scan plugin +1 more +3 moreA Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage...6.1 Medium
- ivanti secure access clientA logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU)...7.8 High
- vmware fusionVMware Fusion TOCTOU local privilege escalation vulnerability6.7 Medium
- Show moreLoading…