CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 13)
Page 13 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-35826 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c. |
CVE-2023-35824 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c. |
CVE-2023-35823 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c. |
CVE-2023-21101 | High | 7.0 | 2023-06-15 | In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2023-21095 | Medium | 4.7 | 2023-06-15 | In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local e… |
CVE-2022-31645 | High | 7.8 | 2023-06-14 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privileg… |
CVE-2023-20750 | Medium | 4.1 | 2023-06-06 | In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosure with System execution privileges need… |
CVE-2023-20736 | Medium | 6.4 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-29537 | High | 7.5 | 2023-06-02 | Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects F… |
CVE-2023-33974 | High | 7.5 | 2023-05-30 | RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and… |
CVE-2023-30571 | Low | 3.9 | 2023-05-29 | Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the… |
CVE-2023-2898 | Medium | 4.7 | 2023-05-26 | There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a… |
CVE-2023-28320 | Medium | 5.9 | 2023-05-26 | A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build tim… |
CVE-2023-31225 | Low | 3.3 | 2023-05-26 | The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability. |
CVE-2023-33203 | Medium | 6.4 | 2023-05-18 | The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker… |
CVE-2023-32570 | Medium | 5.9 | 2023-05-10 | VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit. |
CVE-2023-28126 | Medium | 5.9 | 2023-05-09 | An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser metho… |
CVE-2023-28125 | Medium | 5.9 | 2023-05-09 | An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access to the server by regi… |
CVE-2023-24903 | High | 8.1 | 2023-05-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2023-24899 | High | 7.0 | 2023-05-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-28201 | Critical | 9.8 | 2023-05-08 | This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadO… |
CVE-2023-27952 | Medium | 4.7 | 2023-05-08 | A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks. |
CVE-2023-21712 | High | 8.1 | 2023-04-27 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-2006 | High | 7.0 | 2023-04-24 | A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper loc… |
CVE-2023-31083 | Medium | 4.7 | 2023-04-24 | An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and… |
CVE-2023-28142 | Medium | 6.7 | 2023-04-18 | A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privile… |
CVE-2023-30543 | Medium | 5.2 | 2023-04-17 | @web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user changes chains as part of the connection… |
CVE-2023-28984 | Medium | 5.3 | 2023-04-17 | A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause… |
CVE-2023-26980 | High | 7.0 | 2023-04-14 | PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to… |
CVE-2023-1285 | High | 7.5 | 2023-04-14 | Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a r… |
CVE-2023-28308 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28307 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28306 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28305 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28278 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28273 | High | 7.0 | 2023-04-11 | Windows Clip Service Elevation of Privilege Vulnerability |
CVE-2023-28232 | High | 7.5 | 2023-04-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-20687 | Medium | 6.4 | 2023-04-06 | In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20686 | Medium | 6.4 | 2023-04-06 | In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20685 | Medium | 6.4 | 2023-04-06 | In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20684 | Medium | 6.4 | 2023-04-06 | In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-1582 | Medium | 4.7 | 2023-04-05 | A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user priv… |
CVE-2022-48221 | High | 7.5 | 2023-04-04 | An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user writable directory. Through a race conditi… |
CVE-2023-21031 | Medium | 4.7 | 2023-03-24 | In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional… |
CVE-2023-28144 | High | 7.0 | 2023-03-14 | KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and eleva… |
CVE-2023-24861 | High | 7.0 | 2023-03-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-23407 | High | 7.1 | 2023-03-14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
CVE-2023-23404 | High | 8.1 | 2023-03-14 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-23393 | High | 7.0 | 2023-03-14 | Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability |
CVE-2022-48366 | Low | 3.7 | 2023-03-12 | An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack. |
CVE-2021-20251 | Medium | 5.9 | 2023-03-06 | A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are… |
CVE-2022-46713 | Medium | 4.7 | 2023-02-27 | A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be… |
CVE-2022-32844 | Medium | 6.3 | 2023-02-27 | A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app with arbitrary ker… |
CVE-2023-23039 | Medium | 5.7 | 2023-02-22 | An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate at… |
CVE-2020-19824 | High | 7.0 | 2023-02-17 | An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter. |
CVE-2022-32764 | High | 7.5 | 2023-02-16 | Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2022-47331 | Medium | 4.7 | 2023-02-12 | In wlan driver, there is a race condition. This could lead to local denial of service in wlan services. |
CVE-2023-0739 | Medium | 6.8 | 2023-02-08 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4. |
CVE-2022-42951 | High | 8.1 | 2023-02-06 | An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server n… |
CVE-2021-36532 | High | 8.1 | 2023-02-03 | Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php. |
CVE-2021-46873 | Medium | 5.3 | 2023-01-29 | WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a fu… |
CVE-2023-24042 | High | 7.5 | 2023-01-21 | A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten cont… |
CVE-2015-10067 | Medium | 4.6 | 2023-01-18 | A vulnerability was found in oznetmaster SSharpSmartThreadPool. It has been classified as problematic. This affects an unknown part of the file SSharpSmartThre… |
CVE-2023-22499 | High | 7.5 | 2023-01-17 | Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by… |
CVE-2022-4037 | Medium | 6.4 | 2023-01-12 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15… |
CVE-2023-21771 | High | 7.0 | 2023-01-10 | Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability |
CVE-2023-21766 | Medium | 4.7 | 2023-01-10 | Windows Overlay Filter Information Disclosure Vulnerability |
CVE-2023-21733 | High | 7.0 | 2023-01-10 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-21725 | Medium | 6.3 | 2023-01-10 | Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability |
CVE-2023-21679 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21546 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21542 | High | 7.0 | 2023-01-10 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-21536 | Medium | 4.7 | 2023-01-10 | Event Tracing for Windows Information Disclosure Vulnerability |
CVE-2023-21535 | High | 8.1 | 2023-01-10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-32645 | Medium | 4.1 | 2023-01-03 | In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges ne… |
CVE-2022-2742 | High | 8.8 | 2023-01-02 | Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2022-46174 | Medium | 4.2 | 2022-12-28 | efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS mount helper in efs-utils v… |
CVE-2022-2583 | Low | 3.7 | 2022-12-27 | A race condition can cause incorrect HTTP request routing. |
CVE-2022-42930 | High | 7.1 | 2022-12-22 | If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component. This vulnerability affec… |
CVE-2022-36318 | Medium | 5.3 | 2022-12-22 | When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox E… |
CVE-2022-22763 | High | 8.8 | 2022-12-22 | When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability a… |
CVE-2022-22746 | Medium | 5.9 | 2022-12-22 | A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>*This bug only… |
CVE-2022-22737 | High | 7.5 | 2022-12-22 | Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a p… |
CVE-2022-20567 | Medium | 6.4 | 2022-12-16 | In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System exec… |
CVE-2022-46689 | High | 7.0 | 2022-12-15 | A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, i… |
CVE-2022-42864 | High | 7.0 | 2022-12-15 | A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2… |
CVE-2022-44676 | High | 8.1 | 2022-12-13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-44669 | High | 7.0 | 2022-12-13 | Windows Error Reporting Elevation of Privilege Vulnerability |
CVE-2021-39660 | High | 7.0 | 2022-12-13 | In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalation of privilege… |
CVE-2022-42771 | Medium | 4.7 | 2022-12-06 | In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. |
CVE-2022-42770 | Medium | 4.7 | 2022-12-06 | In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. |
CVE-2022-39134 | Medium | 4.7 | 2022-12-06 | In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel. |
CVE-2022-32621 | Medium | 6.4 | 2022-12-05 | In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2022-45869 | Medium | 5.5 | 2022-11-30 | A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memo… |
CVE-2022-45888 | Medium | 6.4 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of… |
CVE-2022-45887 | Medium | 4.7 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_deta… |
CVE-2022-45886 | High | 7.0 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads… |
CVE-2022-45885 | High | 7.0 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a de… |
CVE-2022-45884 | High | 7.0 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically all… |
CVE-2022-40130 | Medium | 4.3 | 2022-11-18 | Auth. (subscriber+) Race Condition vulnerability in WP-Polls plugin <= 2.76.0 on WordPress. |