CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- nodejs undiciundici vulnerable to HTTP response queue poisoning via keep-alive socket reuse3.7 Low
- earendil-works piPi: Race condition in auth.json writes could expose stored credentials2.2 Low
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +6 more +8 moreAbrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories7.8 High
- openclawOpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection6.0 Medium
- openclawOpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist7.6 High
- openclawOpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution8.7 High
- filebrowserFile Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path8.4 High
- kitty project kittyKitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol5.0 Medium
com.appsmith:serverMavenAppsmith Super User Creation Race Condition Allows Multiple Instance Administrators8.1 High- apache cxfApache CXF: OAuth2: TOCTOU Race Condition in Refresh Token Processing7.4 High
- openclawOpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation7.7 High
- slate digital llc digital connectSlate Digital Connect macOS XPC PID validation privilege escalation8.4 High
- microsoft defender for endpoint, defender for endpoint for mac +1 moreMicrosoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability5.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Program Compatibility Assistant Service Elevation of Privilege Vulnerability7.8 High
- nesquena hermes-webuiHermes WebUI < 0.51.303 TOCTOU Race Condition via git_discard4.3 Medium
- waves audio ltd. centralLocal Privilege Escalation via Insecure XPC Client Validation in Waves Central for macOS8.1 High
- x-vpn macos websiteX-VPN macOS website versions - Local Privilege Escalation7.3 High
- siderolabs omniOmni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token7.0 High
- sbabic swupdateSWUpdate Untrusted Script Execution via Signed Update TOCTOU7.3 High
- sony ps4A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13...7.4 High
- qualcomm cologne firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +33 more +35 moreTime-of-check Time-of-use (TOCTOU) Race Condition in DSP Service7.8 High
- qualcomm 5g fixed wireless access platform firmware, c-v2x 9150 firmware, cq7790 firmware +234 more +236 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver6.4 Medium
- mediatek mt6739 firmware, mt6761 firmware, mt6765 firmware +34 more +36 moreIn geniezone, there is a possible out of bounds write due to a race condition. This could lead to...6.4 Medium
- linux, linux kernel, red hat enterprise linux 10 +15 more +17 moresctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebtrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak4.7 Medium
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +2 moreKeycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability6.5 Medium
- linux, linux kernel +1 morebpf: Require frozen map for calculating map hash4.7 Medium
- 1panel-dev maxkbMaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch5.1 Medium
- convoypanel panelPterodactyl has a database resource limit bypass via race condition in Client API2.3 Low
- nvidia geforce, gpu display driver, guest driver +3 more +5 moreNVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one (mac) +1 moreA time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one (mac) +1 moreA time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service...7.0 High
- netatalkTOCTOU with root privilege in ad_flush3.7 Low
- huggingface diffusersDiffusers: TOCTOU Trust Remote Code Bypass7.5 High
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreSIG(0) validation during query flood may lead to undefined behavior7.5 High
- rsyncproject rsyncRsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls7.2 High
- rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 moreRsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write7.3 High
- docker engine, moby, mobyproject moby\/v2 +2 moreMoby: Race condition in docker cp allows bind mount redirection to host path7.2 High
- docker engine, moby, mobyproject moby\/v2 +2 moreMoby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap6.1 Medium
- wwbn avideoAVideo CVE-2026-43884 incomplete fix - `isSSRFSafeURL()` call sites still discard the `$resolvedIP` out-param at master HEAD post6.5 Medium
- vmware fusionTOCTOU local privilege escalation vulnerability7.8 High
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +5 more +7 moreA race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent...2.0 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210 +18 more +20 moreA TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load...1.8 Low
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- labring fastgptFastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints6.3 Medium
- czlonkowski n8n-mcpn8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths7.2 High
- linux, linux kernel +1 morerust_binder: avoid reading the written value in offsets array7.8 High
- linux, linux kernel +1 moreceph: fix i_nlink underrun during async unlink4.7 Medium
- apache cloudstackApache CloudStack: Domain/account resources limits not honored6.5 Medium
- Show moreLoading…