CWE-662: Improper Synchronization
The product utilizes multiple threads, processes, components, or systems to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- jenkins convertigo mobile platform, jenkins project convertigo mobile platform plugin +1 moreImproper Synchronization in Jenkins Convertigo Mobile Platform Plugin6.5 Medium
- intel chipset firmware, power management controller +1 moreImproper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before...4.4 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context...6.5 Medium
- google tensorflowDeadlock in mutually recursive `tf.function` objects5.5 Medium
- apple macosA sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage.5.3 Medium
- mitsubishielectric gt softgot2000, got2000 gt23 firmware, got2000 gt25 firmware +1 more +3 moreMissing synchronization vulnerability in GOT2000 series GT27 model communication driver versions...7.5 High
- rust-lang rustIn the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut...5.9 Medium
- samsung emailAn improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in...3.1 Low
- mi ax1800 firmware, rm1800 firmware +1 moreThe login verification can be bypassed by using the problem that the time is not synchronized...7.5 High
- va-ts project va-tsData race in va-ts5.9 Medium
- conquer-once project conquer-onceData races in conquer-once7.8 High
- petabi eventioData race in eventio5.9 Medium
- multiqueue2 project multiqueue2Data races in multiqueue25.9 Medium
- nonpolynomial buttplugImproper synchronization in buttplug5.9 Medium
- rusb project rusbData races in rusb7.0 High
- aovec project aovecData races in aovec7.0 High
- devolutions gfwxData races in gfwx7.0 High
- thex project thexData races in thex5.5 Medium
- cisco webex meetings serverCisco Webex Meetings and Cisco Webex Meetings Server Unauthorized Audio Information Exposure Vulnerability6.5 Medium
- may queue project queueData race in may_queue5.9 Medium
- hashconsing project hashconsingData races in hashconsing7.5 High
- late-static project late-staticData races in late-static7.0 High
- im project imData races in im4.7 Medium
- debian linux, linux kernel, netapp 500f firmware +12 more +14 moreCVE-2020-25668 does not affect BellSoft software7.0 High
- atomic-option project atomic-optionData race in atomic-option5.9 Medium
- freebsdIn FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4...8.1 High
- squid-cache squidUpdated squid packages fix security vulnerability6.5 Medium
- vm-memory project vm-memoryImproper Synchronization and Race Condition in vm-memory7.5 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...5.5 Medium
- freeradius, opensuse leap +1 moreIn FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to...7.5 High
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a...7.2 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...6.5 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moreIn the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector...4.4 Medium
- spin-rs project spin-rsWrong memory orderings violates mutual exclusion in spin7.5 High
- actiontec web6000q firmwareOn Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with...9.8 Critical
- anker-in roav dashcam a1 firmwareAn exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the...5.3 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in...7.8 High
- mitsubishielectric qj71e71-100 firmware, qj71e71-b2 firmware, qj71e71-b5 firmware +2 moreAn issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface...8.6 High