CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- laradashboardLaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit6.3 Medium
- litespeed technologies openlitespeedOpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update5.4 Medium
- nvidia virtual gpu managerNVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing...7.8 High
- electronElectron: Local race condition in Squirrel.Mac update installation on macOS6.7 Medium
- nagios host, teamviewer full client +1 moreTime-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation7.3 High
- No product listedImproper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier...5.3 Medium
- nezhahq nezhaNezha before 2.3.1 Denial of Service via Concurrent Server Delete6.0 Medium
- froxlorFroxlor before 2.3.12 Privilege Escalation via SSH Key Sync7.1 High
- openclawOpenClaw before 2026.7.1 Path Traversal via Filesystem Race8.8 High
- google chromeRace condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker...5.3 Medium
- google chromeRace condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker...8.0 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability8.8 High
- mcp-atlassian mcp atlassian, sooperset mcp-atlassian +1 moreMCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)7.5 High
- the gnu c library glibcAT_SECURE programs may load attacker-controlled code via $ORIGIN6.3 Medium
- cloudreveCloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service7.1 High
- jgraph drawiodraw.io: SSRF via DNS rebinding in ProxyServlet bypasses private IP blocklist6.8 Medium
- bleachbitBleachBit: Exploit File Delete to Escalate Privilege7.8 High
- google chromeRace condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker...3.1 Low
- midnightbsd mportmport package installation has symlink TOCTOU in chown and chmod handling5.8 Medium
- midnightbsd mportmport directory asset installation is vulnerable to symlink and path traversal races5.8 Medium
- midnightbsd mportmport package fetch and clean paths are vulnerable to TOCTOU filesystem races5.8 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: File Manager save_file writes through a symbolic link planted after the containment check6.0 Medium
- team-alembic ash authenticationMagic link single-use tokens replayable via TOCTOU race in AshAuthentication9.1 Critical
- qualcomm lemans au lgit firmware, lemansau firmware, qam8255p firmware +27 more +29 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX7.8 High
- gitlabTime-of-check Time-of-use (TOCTOU) Race Condition in GitLab6.4 Medium
- google chromeRace condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who...3.1 Low
- google chromeRace condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote...8.3 High
- google chromeRace condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a...5.3 Medium
- google chromeRace condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had...8.3 High
- google chromeRace condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote...8.3 High
- docker sandboxesDocker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race8.7 High
- crowdstrike falcon sensor for windows, laroux cleanup tool +1 moreVulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows8.8 High
- doyensec safeurlsafeurl validated address is not bound to the request, allowing DNS rebinding9.0 Critical
- ibm iIBM i is Affected By A Race Condition Vulnerability in SQL Query Engine []6.0 Medium
- eclipse foundation ankaiosIn Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control...8.4 High
- apache software foundation storm worker launcherApache Storm Worker Launcher: Local Privilege Escalation to Root via a Time-of-Check Race in the Worker Launcher7.8 High
- apache software foundation storm worker launcherApache Storm Worker Launcher: Local Privilege Escalation to Root via Container Command Files Chowned to the Tenant7.8 High
- samsung exynos 1280 firmwareAn issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400,...2.8 Low
- pleskA Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in...9.9 Critical
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 moreGvfs: gvfs-admin socket ownership race permits local root7.0 High
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader7.7 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.6 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.6 Medium
- google chromeRace condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...5.3 Medium
- google chromeRace condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local...8.1 High
- google chromeRace condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who...8.8 High
- google chromeRace condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a...8.1 High
- google chromeRace condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote...3.1 Low
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 moreWindows MIDI Service Module Elevation of Privileges Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Win32k Elevation of Privilege Vulnerability7.0 High
- Show moreLoading…