CVE-2026-111449 | Medium | 5.9 | 2026-10-16 | Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes e… |
CVE-2026-101311 | High | 7.0 | 2026-10-15 | The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync. Additionally… |
CVE-2026-101310 | High | 7.0 | 2026-10-15 | The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bou… |
CVE-2026-101309 | High | 7.0 | 2026-10-15 | The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. The size was re-read from guest memory on each use, and Tran… |
CVE-2026-58100 | | | 2026-10-15 | kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's tab… |
CVE-2026-58099 | | | 2026-10-15 | When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used internally to track list traversal position) b… |
CVE-2026-86562 | High | 7.8 | 2026-10-14 | A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VD… |
CVE-2026-100394 | Medium | 6.5 | 2026-10-14 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/sing… |
CVE-2026-97787 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allow… |
CVE-2026-96949 | High | 7.0 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-96932 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to e… |
CVE-2026-96919 | High | 7.0 | 2026-10-13 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96215 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privi… |
CVE-2026-88174 | High | 8.1 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to e… |
CVE-2026-88160 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker… |
CVE-2026-88146 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an… |
CVE-2026-88107 | High | 7.0 | 2026-10-13 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-88096 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate pri… |
CVE-2026-87710 | High | 7.0 | 2026-10-13 | Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85941 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
CVE-2026-85912 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to… |
CVE-2026-85904 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker… |
CVE-2026-85825 | High | 7.0 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85824 | High | 7.0 | 2026-10-13 | Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-85357 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate p… |
CVE-2026-85333 | Medium | 6.7 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to ele… |
CVE-2026-85329 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privi… |
CVE-2026-84014 | High | 7.0 | 2026-10-13 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83899 | High | 7.0 | 2026-10-13 | Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-83879 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate… |
CVE-2026-83868 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elev… |
CVE-2026-83841 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg… |
CVE-2026-83775 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
CVE-2026-83738 | High | 7.0 | 2026-10-13 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-83722 | High | 7.0 | 2026-10-13 | Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
CVE-2026-83666 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authoriz… |
CVE-2026-81971 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges… |
CVE-2026-71347 | Medium | 6.4 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate… |
CVE-2026-70250 | High | 8.8 | 2026-10-13 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-70195 | Medium | 4.7 | 2026-10-13 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. |
CVE-2026-70183 | High | 7.5 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges… |
CVE-2026-70169 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized… |
CVE-2026-70097 | Medium | 5.6 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an au… |
CVE-2026-69935 | High | 7.0 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-69931 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privile… |
CVE-2026-69856 | High | 7.0 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-69830 | High | 8.1 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute c… |
CVE-2026-69766 | High | 7.0 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-69763 | High | 7.0 | 2026-10-13 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-69736 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elev… |
CVE-2026-103568 | High | 7.8 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to el… |
CVE-2026-102211 | High | 7.0 | 2026-10-13 | Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-102207 | High | 7.0 | 2026-10-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
CVE-2026-82416 | High | 7.7 | 2026-10-13 | FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session exten… |
CVE-2026-109954 | Medium | 6.5 | 2026-10-13 | Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactiona… |
CVE-2026-109945 | Medium | 5.3 | 2026-10-13 | FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate co… |
CVE-2026-109779 | Medium | 4.2 | 2026-10-13 | Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
CVE-2026-109776 | Medium | 4.2 | 2026-10-13 | Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
CVE-2026-109765 | Medium | 4.2 | 2026-10-13 | Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbir… |
CVE-2026-109757 | High | 8.3 | 2026-10-13 | Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderb… |
CVE-2026-109719 | Medium | 4.2 | 2026-10-13 | Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thun… |
CVE-2026-109407 | Low | 3.1 | 2026-10-13 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the c… |
CVE-2026-19936 | Medium | 4.8 | 2026-10-13 | The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks)… |
CVE-2026-42689 | Low | 3.7 | 2026-10-12 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Events Manager events-manager allows Leve… |
CVE-2026-109279 | Low | 2.5 | 2026-10-12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the… |
CVE-2026-93694 | Medium | 4.0 | 2026-10-12 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this beha… |
CVE-2026-108830 | Medium | 4.2 | 2026-10-12 | A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the component V… |
CVE-2026-97791 | High | 7.5 | 2026-10-09 | In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stor… |
CVE-2026-100227 | High | 7.5 | 2026-10-09 | Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors (XmlSigInHandl… |
CVE-2026-19571 | Medium | 6.7 | 2026-10-09 | The ITE IT8xxx2 SHI host-command backend (subsys/mgmt/ec_host_cmd/backends/ec_host_cmd_backend_shi_ite.c) copied the 8-byte host-command request header from th… |
CVE-2026-97032 | High | 7.5 | 2026-10-08 | HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder… |
CVE-2026-84230 | High | 7.5 | 2026-10-08 | IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized… |
CVE-2026-84271 | High | 7.8 | 2026-10-08 | IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vul… |
CVE-2026-42698 | Medium | 5.3 | 2026-10-08 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Con… |
CVE-2026-94584 | Low | 2.6 | 2026-10-08 | A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentica… |
CVE-2026-94583 | Low | 2.6 | 2026-10-08 | A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handli… |
CVE-2026-107276 | | | 2026-10-07 | MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurre… |
CVE-2026-105140 | Medium | 4.2 | 2026-10-07 | Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships just revoked i… |
CVE-2026-106500 | High | 8.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affe… |
CVE-2026-56906 | High | 7.0 | 2026-10-06 | In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional exec… |
CVE-2026-106426 | High | 8.3 | 2026-10-06 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |
CVE-2026-106385 | Medium | 5.3 | 2026-10-06 | Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system acces… |
CVE-2026-106377 | High | 8.3 | 2026-10-06 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code ou… |
CVE-2026-106255 | High | 8.8 | 2026-10-06 | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted H… |
CVE-2026-106238 | High | 8.3 | 2026-10-06 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbit… |
CVE-2026-106213 | Medium | 4.3 | 2026-10-06 | Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Ch… |
CVE-2026-106201 | High | 8.8 | 2026-10-06 | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-105773 | High | 7.0 | 2026-10-05 | Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and… |
CVE-2026-58880 | High | 7.0 | 2026-10-05 | In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of pri… |
CVE-2026-104714 | High | 8.8 | 2026-10-05 | Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message formats a… |
CVE-2026-104970 | High | 8.1 | 2026-10-05 | Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license/api/views/admin.py:89-117, 173-22… |
CVE-2026-105163 | Medium | 5.3 | 2026-10-04 | A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of… |
CVE-2026-105112 | Medium | 5.3 | 2026-10-03 | Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-admin users to deadlock the alertin… |
CVE-2026-104855 | | | 2026-10-02 | Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks inside bulk operations including memory.copy, tabl… |
CVE-2026-39601 | Low | 3.7 | 2026-10-02 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveragi… |
CVE-2026-104057 | High | 7.5 | 2026-10-01 | Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections… |
CVE-2026-103282 | Medium | 4.3 | 2026-10-01 | Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a… |
CVE-2026-103651 | | | 2026-10-01 | MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (paper) token and rewinding of the token… |
CVE-2026-47565 | Medium | 6.4 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a privileged user could trigger a race condition that leads to an o… |
CVE-2026-79625 | High | 8.1 | 2026-09-30 | Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorr… |