CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- apache software foundation tomcatApache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector8.1 High
- aliasvault, aliasvault ghcr.io/aliasvault/aliasvault, ghcr.io/aliasvault/api +1 more +3 moreAliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction6.3 Medium
- lycheeorg lycheeLychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation2.3 Low
- freebsdTOCTOU race between sound(4) buffer resizing and mmap5.5 Medium
- qnap systems inc. quroutervcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface7.5 High
- alam00000 bentopdfBentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker6.8 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou6.4 Medium
- microsoft linux 3p (third party) distrosLinux Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Modern Device Management (MDM) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreServicing Stack Updates Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Win32 Kernel Subsystem Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +11 more +13 moreWindows Broadcast DVR User Service Elevation of Privilege Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreReliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability7.0 High
- microsoft windows subsystem for linux, windows subsystem for linux (wsl2) +1 moreWindows Subsystem for Linux Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Error Reporting Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Modern Device Management (MDM) Tampering Vulnerability4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Setup Files Cleanup Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability4.4 Medium
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Office Click-To-Run Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows BitLocker Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Print Spooler Components Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Projected File System Tampering Vulnerability4.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreMicrosoft OpenSSH for Windows Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Hyper-V Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Kernel-Mode Drivers Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Setup Files Cleanup Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +5 more +7 moreWindows SmartScreen Information Disclosure Vulnerability4.7 Medium
- jupyter notebook, jupyterlab, jupyterlab jupyterlite-core +2 moreJupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked4.2 Medium
- privasys ra-tls-clientsPrivasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks7.2 High
- hyper-mcp-rs hyper-mcphyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race Condition8.3 High
- shepherd-agents shepherdShepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker2.3 Low
- apache cxfApache CXF: JPA authorization-code consume is non-atomic8.1 High
gnutlsAzure Linux,gnutls26Ubuntu,gnutls28Debian +1 more +3 moreAn issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to...3.7 Low- mispMISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests6.3 Medium
- anthropic @anthropic-ai/claude-codeArbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code7.7 High
- yawkat lz4-javayawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user7.3 High
- giteaGitea push mirror SSRF and forced writes to internal Git hosts8.1 High
- giteaGitea migration and pull mirror SSRF through multi-answer DNS4.3 Medium
- google chromeRace condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who...4.2 Medium
- google chromeRace condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute...8.8 High
- google chromeRace condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a...6.0 Medium
- google chromeRace condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...4.7 Medium
- google chromeRace condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote...8.3 High
- moby buildkitBuildKit proxy CA cleanup can be disrupted by build steps5.8 Medium
- docling, docling-project docling-slim +1 moreDocling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)4.0 Medium
- tryghost ghostGhost: Server-Side Request Forgery in Bookmark Fetching4.0 Medium
- progress software progress® telerik® fiddler® classicTime-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® Classic6.6 Medium
- Show moreLoading…