CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft defender for endpoint, defender for endpoint for linux +1 moreMicrosoft Defender for Linux Denial of Service Vulnerability7.0 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +11 more +13 moreWindows Graphics Component Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreNtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- crowdstrike falcon sensor for windowsCrowdStrike Falcon Sensor for Windows Race Condition5.6 Medium
- zoom communications, inc workplace vdi plugin macos universal installer for vmware horizonZoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race Condition6.6 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows TCP/IP Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreGraphics Kernel Remote Code Execution Vulnerability7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreSPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremedia: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()4.7 Medium
- antirez linenoiseTOCTOU race in Linenoise enables arbitrary file overwrite and permission changes6.8 Medium
- nagios host, teamviewer full client +1 moreArbitrary File Creation via Symbolic Link leading to Denial-of-Service6.1 Medium
- saad iqbal mycredWordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability5.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)5.9 Medium
- microsoft windows subsystem for linux (wsl2), windows subsystem for linux +1 moreWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows NTFS Information Disclosure Vulnerability7.0 High
- No product listedTime-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite...7.3 High
- No product listedTime-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and...6.8 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +43 more +45 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Display7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, snapdragon 8 gen 1 mobile platform firmware +4 more +6 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux7.8 High
- qualcomm fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +27 more +29 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux7.8 High
- huawei harmonyosRace condition vulnerability in the virtualization base module. Successful exploitation of this...8.1 High
- nvidia gpu display driversNVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use...7.0 High
- android tvRace condition in AndroidTV TvSettings6.9 Medium
- apple macosA logic error was addressed with improved error handling. This issue is fixed in macOS Sequoia 15...5.3 Medium
- debian linux, linux kernel +1 morevsock: Fix transport_{g2h,h2g} TOCTOU4.7 Medium
- debian linux, linux kernel +1 morevsock: Fix transport_* TOCTOU7.0 High
- debian linux, linux kernel +1 moreposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()7.8 High
- eset safe server, small business security, eset, spol. s r.o. eset endpoint antivirus for windows +10 more +12 moreTOCTOU race condition vulnerability in ESET products on Windows5.1 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows BitLocker Security Feature Bypass Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows BitLocker Security Feature Bypass Vulnerability6.8 Medium
- linux, linux kernel +1 morehwmon: (ftsteutates) Fix TOCTOU race in fts_read()4.7 Medium
- debian linux, linux kernel +1 morenet: Fix TOCTOU issue in sk_is_readable()4.7 Medium
- nixos nixA race condition in the Nix, Lix, and Guix package managers allows the removal of content from...3.2 Low
- nvidia driver, peak-system device driver +1 morePEAK-System Driver PCANFD_ADD_FILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability3.8 Low
- asus armoury crateA race condition vulnerability exists in Armoury Crate. This vulnerability arises from a Time-of...8.4 High
- gitlabTime-of-check Time-of-use (TOCTOU) Race Condition in GitLab5.3 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +17 more +19 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver6.6 Medium
- qualcomm fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +32 more +34 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver6.6 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qmp1000 firmware +27 more +29 moreTime-of-check Time-of-use (TOCTOU) Race Condition in DSP Service7.8 High
- versa concertoVersa Concerto Authentication Bypass File Write Remote Code Execution10.0 Critical
- containerdContainerd vulnerable to host filesystem access during image unpack7.6 High
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 moreZoom Workplace Apps - Time-of-check Time-of-use8.8 High
- No product listedTime-of-check time-of-use race condition in the UEFI firmware SmiVariable driver for the Intel(R)...8.7 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreMicrosoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability7.7 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMS-EVEN RPC Remote Code Execution Vulnerability7.5 High
- ami aptiov, aptio v +1 moreTOCTOU in SmmWhea7.5 High
- avast cleanup premiumAvast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation Vulnerability7.8 High
- Show moreLoading…