CVE-2026-105773 | High | 7.0 | 2026-10-05 | Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and… |
CVE-2026-58880 | High | 7.0 | 2026-10-05 | In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of pri… |
CVE-2026-104714 | High | 8.8 | 2026-10-05 | Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message formats a… |
CVE-2026-104970 | High | 8.1 | 2026-10-05 | Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license/api/views/admin.py:89-117, 173-22… |
CVE-2026-105163 | Medium | 5.3 | 2026-10-04 | A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of… |
CVE-2026-105112 | Medium | 5.3 | 2026-10-03 | Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-admin users to deadlock the alertin… |
CVE-2026-104855 | | | 2026-10-02 | Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks inside bulk operations including memory.copy, tabl… |
CVE-2026-39601 | Low | 3.7 | 2026-10-02 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveragi… |
CVE-2026-104057 | High | 7.5 | 2026-10-01 | Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections… |
CVE-2026-103282 | Medium | 4.3 | 2026-10-01 | Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a… |
CVE-2026-103651 | | | 2026-10-01 | MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (paper) token and rewinding of the token… |
CVE-2026-47565 | Medium | 6.4 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a privileged user could trigger a race condition that leads to an o… |
CVE-2026-79625 | High | 8.1 | 2026-09-30 | Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorr… |
CVE-2026-95384 | Medium | 5.3 | 2026-09-29 | Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a craft… |
CVE-2026-95280 | High | 7.5 | 2026-09-29 | Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-100805 | High | 7.5 | 2026-09-29 | Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-101041 | | | 2026-09-27 | The account recovery (password reset) functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use (TOCTOU) race condition… |
CVE-2026-98163 | High | 7.0 | 2026-09-26 | In the Linux kernel, the following vulnerability has been resolved:
cgroup: Avoid iteration of dying tasks with zero refcount
The commit 260fbcb92bbea ("cgro… |
CVE-2026-100546 | Medium | 6.4 | 2026-09-26 | OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path. Concurrent contro… |
CVE-2026-98115 | High | 8.8 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: safely drain sessions during logoff
SMB3 multichannel allows requests for one sess… |
CVE-2026-98109 | Medium | 4.7 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_core: Fix race condition during device registration
In hci_register_dev()… |
CVE-2026-98050 | High | 7.5 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved:
mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context
Currently mlxs… |
CVE-2026-92628 | Low | 3.1 | 2026-09-24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race con… |
CVE-2026-77762 | High | 8.1 | 2026-09-23 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat allows an attacker to inject trailer… |
CVE-2026-96456 | Medium | 6.3 | 2026-09-23 | The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects the session but not the caller, so an a… |
CVE-2026-77633 | High | 7.1 | 2026-09-22 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory use… |
CVE-2026-15890 | Medium | 5.3 | 2026-09-21 | The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, secure_storage_its_transform_aead_get_nonce() in subsys/secure_storage/s… |
CVE-2026-61628 | High | 8.1 | 2026-09-21 | nginx ignition is a user interface for the nginx web server. Prior to version 2.41.1, `POST /api/users/onboarding/finish` is registered as anonymous (unauthent… |
CVE-2026-94043 | Medium | 5.3 | 2026-09-20 | A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_deps/free5gc/NFs/amf/internal/gmm/handle… |
CVE-2026-71537 | Medium | 6.5 | 2026-09-18 | Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Services/Upgrade.php::doUpgrade() relies… |
CVE-2026-73463 | Medium | 5.3 | 2026-09-16 | On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured, a race condition in the gNSI Authz se… |
CVE-2026-91723 | Low | 3.1 | 2026-09-15 | Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium secu… |
CVE-2026-58734 | High | 7.0 | 2026-09-15 | In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege… |
CVE-2026-58728 | High | 7.0 | 2026-09-15 | In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional exec… |
CVE-2026-58724 | High | 7.0 | 2026-09-15 | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2026-58716 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System e… |
CVE-2026-58701 | High | 7.0 | 2026-09-15 | In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2026-56988 | Medium | 6.4 | 2026-09-15 | In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with Sy… |
CVE-2026-56964 | Medium | 6.4 | 2026-09-15 | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2026-56923 | Medium | 6.4 | 2026-09-15 | In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with… |
CVE-2026-56915 | Medium | 6.4 | 2026-09-15 | In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with Sys… |
CVE-2026-55318 | High | 8.8 | 2026-09-15 | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privil… |
CVE-2026-91947 | High | 7.5 | 2026-09-15 | FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the sync… |
CVE-2026-92050 | Critical | 9.1 | 2026-09-15 | Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
CVE-2026-92042 | High | 7.5 | 2026-09-15 | Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-84630 | Medium | 4.7 | 2026-09-14 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS… |
CVE-2026-84607 | High | 7.8 | 2026-09-14 | A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac… |
CVE-2026-84562 | Medium | 4.7 | 2026-09-14 | A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data. |
CVE-2026-84550 | Medium | 4.7 | 2026-09-14 | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be abl… |
CVE-2026-84522 | Medium | 5.9 | 2026-09-14 | A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. |
CVE-2026-84507 | High | 7.8 | 2026-09-14 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS… |
CVE-2026-84492 | Medium | 4.7 | 2026-09-14 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS… |
CVE-2026-65415 | High | 8.1 | 2026-09-14 | A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27… |
CVE-2026-65401 | Medium | 5.5 | 2026-09-14 | A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to cause unexpec… |
CVE-2026-65360 | Medium | 4.7 | 2026-09-14 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS… |
CVE-2026-65358 | Medium | 4.7 | 2026-09-14 | A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe… |
CVE-2026-64717 | Medium | 6.3 | 2026-09-14 | A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15… |
CVE-2026-53715 | Medium | 5.3 | 2026-09-14 | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer… |
CVE-2026-43783 | High | 7.8 | 2026-09-14 | A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges. |
CVE-2026-43690 | Medium | 4.7 | 2026-09-14 | A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be ab… |
CVE-2026-18151 | Medium | 4.2 | 2026-09-14 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition during the WebSocket handshake… |
CVE-2026-85892 | High | 7.8 | 2026-09-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to… |
CVE-2026-7208 | Medium | 5.3 | 2026-09-14 | Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackers to interrupt activ… |
CVE-2026-90506 | Medium | 5.0 | 2026-09-13 | A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This impacts an unknown function of the component Sav… |
CVE-2026-90505 | Medium | 5.0 | 2026-09-13 | A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipula… |
CVE-2026-50013 | High | 7.5 | 2026-09-11 | Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the `AddDiff()` function writes to the shared `… |
CVE-2026-89099 | High | 7.5 | 2026-09-11 | A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronizati… |
CVE-2026-86766 | Medium | 6.5 | 2026-09-09 | Snipe-IT versions up to and including 8.6.3 contain a race condition (TOCTOU) in the consumable checkout API endpoint (POST /api/v1/consumables/{consumable_id}… |
CVE-2026-86744 | Low | 2.2 | 2026-09-09 | Snipe-IT 8.6.3 and earlier (and develop pre-release commits prior to the fix) contain a race condition in the asset checkout paths. Api\AssetsController::check… |
CVE-2026-87816 | High | 7.5 | 2026-09-09 | PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass e… |
CVE-2026-87641 | Medium | 4.2 | 2026-09-09 | Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chro… |
CVE-2026-87615 | Medium | 5.4 | 2026-09-09 | Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted H… |
CVE-2026-87601 | High | 7.5 | 2026-09-09 | Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-87467 | High | 8.1 | 2026-09-09 | Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sand… |
CVE-2026-58848 | High | 7.0 | 2026-09-08 | In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege… |
CVE-2026-28604 | High | 7.5 | 2026-09-08 | In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privil… |
CVE-2026-77894 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
CVE-2026-73005 | High | 7.0 | 2026-09-08 | Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. |
CVE-2026-70582 | Medium | 6.4 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker… |
CVE-2026-70091 | Medium | 5.9 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over… |
CVE-2026-69827 | High | 8.1 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over… |
CVE-2026-69799 | High | 7.8 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privilege… |
CVE-2026-69792 | Medium | 4.7 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a securit… |
CVE-2026-69782 | High | 8.1 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over… |
CVE-2026-69710 | High | 7.5 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privilege… |
CVE-2026-69682 | High | 7.0 | 2026-09-08 | Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69581 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69448 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to eleva… |
CVE-2026-69441 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
CVE-2026-69404 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg… |
CVE-2026-69398 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to eleva… |
CVE-2026-69385 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg… |
CVE-2026-69364 | High | 7.1 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker t… |
CVE-2026-69319 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevat… |
CVE-2026-68840 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate priv… |
CVE-2026-68824 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho… |
CVE-2026-50349 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
CVE-2026-9040 | High | 7.7 | 2026-09-08 | A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allo… |
CVE-2026-62437 | Medium | 6.5 | 2026-09-08 | When guests are terminated, various pieces of cleanup need carrying out.
The cleaning up of PCI devices which were assigned to guests, and the
associated remov… |
CVE-2026-85704 | Low | 3.7 | 2026-09-04 | A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak… |