CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- avg tuneupLink Following Local Privilege Escalation Vulnerability in AVG TuneUp Version 23.47.8 High
- avast cleanup, avg tuneup, norton utilities ultimate +2 moreLink Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)7.8 High
- dell powerscale onefsDell PowerScale OneFS, versions 9.8.0.0 through 9.10.1.0, contain a time-of-check time-of-use ...4.4 Medium
- rack rack-sessionRack session gets restored after deletion4.2 Medium
screenAlpaquitaScreen has a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root5.7 Medium- rackRack session gets restored after deletion4.2 Medium
- qualcomm sdm429w firmware, snapdragon 429 mobile firmware, wcn3620 firmware +2 more +4 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver7.8 High
- tesla model s, model s firmware +1 moreTesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability5.0 Medium
- symantec endpoint protection, broadcom symantec eraser engine +1 moreSymantec Endpoint Protection Elevation of Privilege6.5 Medium
- snowflake connector, snowflakedb snowflake-connector-nodejs +1 moreNodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file3.3 Low
- snowflake gosnowflakeGo Snowflake Driver has race condition when checking access to Easy Logging configuration file3.3 Low
- snowflake connector, snowflakedb snowflake-connector-net +1 moreSnowflake Connector for .NET has race condition when checking access to Easy Logging configuration file3.3 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: mvpp2: Prevent parser TCAM memory corruption4.7 Medium
- conda-forge conda-forge-webservicesconda-forge-webservices has an Unauthorized Artifact Modification Race Condition7.5 High
- msi centerMSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation.8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Local Security Authority (LSA) Elevation of Privilege Vulnerability7.0 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +34 more +36 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform5.5 Medium
- qualcomm c-v2x 9150 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +56 more +58 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera7.8 High
- linux, linux kernel +1 morefirmware: qcom: uefisecapp: fix efivars registration race4.7 Medium
- linux, linux kernel +1 moreRevert "openvswitch: switch to per-action label counting in conntrack"7.8 High
- ami aptiov, aptio v +1 moreSMM Arbitrary Write via TOCTOU Vulnerability7.5 High
- qnap systems inc. qfinder pro mac, qsync for mac, qvpn device client for mac +2 moreQVPN Device Client, Qsync, Qfinder Pro8.6 High
- vmware esxi, workstation, cloud foundation +3 more +5 moreVMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that...9.3 Critical
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +24 more +26 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform7.8 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +34 more +36 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Automotive Vehicle Networks7.8 High
- ibm entirexIBM EntireX race condition3.3 Low
- linux, linux kernel +1 moreInput: synaptics - fix crash when enabling pass-through port4.7 Medium
- duendesoftware fossDuende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens6.3 Medium
- No product listedTime-of-check time-of-use race condition for some Intel(R) Battery Life Diagnostic Tool software...5.4 Medium
- nvidia container toolkit, gpu operator +1 moreNVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability...8.3 High
- microsoft autoupdate, autoupdate for mac +1 moreMicrosoft AutoUpdate (MAU) Elevation of Privilege Vulnerability7.0 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)3.7 Low
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)3.7 Low
- No product listedA Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the driver of the...7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +35 more +37 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera7.8 High
- qualcomm c-v2x 9150 firmware, csrb31024 firmware, fastconnect 6800 firmware +60 more +62 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux7.8 High
astevalPyPI,rootio-astevalRoot +1 moreASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape8.4 High- No product listedTime-of-check time-of-use race condition in some Intel(R) Neural Compressor software before...2.1 Low
- dell display managerDell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use (TOCTOU)...6.7 Medium
- ami aptiov, aptio v +1 moreTOCTOU Race Condition between DMA and SMM7.5 High
- ibm doors next, engineering requirements management doors next +1 moreIBM Engineering Requirements Management DOORS Next code execution9.8 Critical
- apache tomcat, netapp bootstrap os +1 moreApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 Critical
- apache tomcat, netapp bootstrap os +1 moreApache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8 Critical
- velocidex winpmemWinPmem Improper Input Validation vulnerability7.3 High
- dell thinos, wyse proprietary os (modern thinos) +1 moreDell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition...7.8 High
- lfprojects mlflowExcessive directory permissions in MLflow leads to local privilege escalation when using spark_udf7.0 High
- ibm engineering systems design rhapsody - model manager, engineering systems design rhapsody +1 moreIBM Engineering Systems Design Rhapsody - Model Manager9.8 Critical
- intel 4th generation intel xeon processor scalable family, 5th generation intel xeon processor scalable family +1 moreTime-of-check Time-of-use Race Condition in some Intel(R) processors with Intel(R) ACTM may allow...8.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +33 more +35 moreWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +20 more +22 moreWindows Registry Elevation of Privilege Vulnerability7.5 High
- Show moreLoading…