CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- freebsdbhyve(8) virtio_vq_recordon time-of-check to time-of-use race6.5 Medium
- run.codesUsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.8.1 High
- linux, linux kernel +1 morewifi: iwlegacy: Clear stale interrupts before resuming device7.0 High
- linux, linux kernel +1 morefork: do not invoke uffd on fork if error occurs4.7 Medium
- hasomed elefant software updaterLocal Privilege Escalation via Race Condition7.0 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +42 more +44 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +42 more +44 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera7.8 High
- agendaless waitressWaitress has request processing race condition in HTTP pipelining with invalid first request9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: dsa: improve shutdown sequence4.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset8.2 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)3.1 Low
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- avast antivirus, avg anti-virus +1 moreLocal privelage escalation via COM hijacking7.5 High
- bytecodealliance wasmtimeWasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations2.9 Low
- nvidia container toolkit, gpu operator +1 moreNVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system4.1 Medium
- nvidia container toolkit, gpu operator +1 moreNVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability9.0 Critical
- moxa mxview one series, mxview one +1 moreMXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition6.0 Medium
- simple online planning so planning, soplanning, so planning simple online planning +2 moreRemote Code Execution through File Upload in SOPlanning before 1.52.028.9 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreexec: Fix ToCToU between perm check and set-uid/gid usage7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)7.0 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreSecurity vulnerability in AdobeARMHelper7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and...7.5 High
- postgresqlPostgreSQL relation replacement during pg_dump executes arbitrary SQL8.8 High
- mozilla firefox, firefox esr +1 moreCalling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can...6.5 Medium
- linux, linux kernel +1 moreice: Don't process extts if PTP is disabled4.7 Medium
- apache streampipesApache StreamPipes: Potential creation of multiple identical accounts3.7 Low
- zoom rooms, zoom communications, inc workplace app for windows and zoom rooms app for windows, zoom workplace desktop +2 moreZoom Workplace App for Windows and Zoom Rooms App for Windows - Race Condition6.6 Medium
- zoom communications, inc workplace apps and sdks, zoom meeting software development kit, workplace desktop +1 more +3 moreZoom Workplace Apps and SDKs - Path traversal6.8 Medium
- zoom communications, inc apps and sdks, zoom meeting sdk, meeting software development kit +2 more +4 moreZoom Apps and SDKs - Race Condition7.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreRace condition in permission assignment4.7 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1380 firmware +5 more +7 moreA vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080,...5.1 Medium
- qtAn issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x...8.6 High
- openbsd opensshOpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password...7.5 High
- hp dragonfly folio 13.5 inch g3 2-in-1 notebook pc firmware, elite dragonfly 13.5 inch g3 notebook pc firmware, elite dragonfly firmware +351 more +353 moreA potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP...7.8 High
- dell poweredge platform, poweredge c6615 firmware, poweredge r6615 firmware +4 more +6 moreDell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low...5.3 Medium
- schneider electric spacelogic as-b, spacelogic as-p, schneider-electric spacelogic as-b firmware +1 more +3 moreCWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause...6.4 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +11 more +13 moreWindows Perception Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.0 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service...7.8 High
- linux, linux kernel +1 moredrm: Fix use-after-free read in drm_getunique()7.0 High
- tenable nessus agentRace Condition8.2 High
- tenable nessusRace Condition8.2 High
- intel neural compressor softwareTime-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2...4.7 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series7.8 High
- alcatel-lucent ale 20, ale 20h, ale 30 +4 more +6 moreAn issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180...7.4 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm, multiplex-labs +2 moreRace Condition Vulnerability in mintplex-labs/anything-llm6.5 Medium
- Show moreLoading…