CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 13)
Page 13 of 28 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-26243 | High | 7.0 | 2024-04-09 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2024-26242 | High | 7.0 | 2024-04-09 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-26236 | High | 7.0 | 2024-04-09 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2024-27983 | High | 8.2 | 2024-04-09 | An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is… |
CVE-2023-52553 | High | 7.4 | 2024-04-08 | Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-26810 | High | 7.8 | 2024-04-05 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to… |
CVE-2024-29863 | High | 7.8 | 2024-04-05 | A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 SR2 (12,80.20200) may allow an existing l… |
CVE-2024-26779 | High | 8.8 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix race condition on enabling fast-xmit fast-xmit must only be enabled a… |
CVE-2024-26708 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: mptcp: really cope with fastopen race Fastopen and PM-trigger subflow shutdown can race… |
CVE-2024-26698 | Medium | 4.7 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove In commit ac50476717… |
CVE-2023-52639 | Medium | 4.7 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: fix race during shadow creation Right now it is possible to see gmap->pr… |
CVE-2024-26671 | Medium | 4.7 | 2024-04-02 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix IO hang from sbitmap wakeup race In blk_mq_mark_tag_wait(), __add_wait_queue(… |
CVE-2023-42974 | High | 7.0 | 2024-03-28 | A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS… |
CVE-2024-26307 | Medium | 5.3 | 2024-03-21 | Possible race condition vulnerability in Apache Doris. Some of code using `chmod()` method. This method run the risk of someone renaming the file out from unde… |
CVE-2023-52609 | Medium | 4.7 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: binder: fix race between mmput() and do_exit() Task A calls binder_update_page_range() to… |
CVE-2024-2193 | Medium | 5.7 | 2024-03-15 | A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclo… |
CVE-2024-24770 | Medium | 5.3 | 2024-03-14 | vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. Muc… |
CVE-2024-27102 | Critical | 9.9 | 2024-03-13 | Wings is the server control plane for Pterodactyl Panel. This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can potent… |
CVE-2023-52608 | Medium | 4.7 | 2024-03-13 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Check mailbox/SMT channel for consistency On reception of a completio… |
CVE-2024-21445 | High | 7.0 | 2024-03-12 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2024-21439 | High | 7.0 | 2024-03-12 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-26617 | High | 7.8 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: move mmu notification mechanism inside mm lock Move mmu notification me… |
CVE-2023-52489 | Medium | 4.7 | 2024-03-11 | In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below race is observed on a… |
CVE-2024-23275 | Medium | 4.7 | 2024-03-08 | A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be… |
CVE-2024-23239 | Medium | 4.7 | 2024-03-08 | A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An ap… |
CVE-2024-23235 | Medium | 4.7 | 2024-03-08 | A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tv… |
CVE-2023-52589 | Medium | 4.7 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ disable race issue In rkisp1_isp_stop() and rkisp1_csi_disable() t… |
CVE-2023-52586 | High | 7.8 | 2024-03-06 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mutex lock in control vblank irq Add a mutex lock to control vblank irq… |
CVE-2023-52578 | High | 7.0 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_fini… |
CVE-2023-52517 | High | 7.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain Previously the… |
CVE-2023-52502 | High | 8.8 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a… |
CVE-2024-1949 | Low | 2.6 | 2024-02-29 | A race condition in Mattermost versions 8.1.x before 8.1.9, and 9.4.x before 9.4.2 allows an authenticated attacker to gain unauthorized access to individual p… |
CVE-2023-52480 | Critical | 9.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A… |
CVE-2023-47634 | Low | 3.1 | 2024-02-29 | Decidim is a participatory democracy framework. Starting in version 0.10.0 and prior to versions 0.26.9, 0.27.5, and 0.28.0, a race condition in the endorsemen… |
CVE-2021-46982 | Medium | 4.7 | 2024-02-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix race condition of overwrite vs truncate pos_fsstress testcase complai… |
CVE-2021-46925 | High | 7.8 | 2024-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_sock A crash occurs when smc_cdc_tx_handl… |
CVE-2024-26578 | Medium | 5.9 | 2024-02-22 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer.This issue affects Apache Answer: th… |
CVE-2024-26585 | Critical | 9.8 | 2024-02-21 | In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, t… |
CVE-2024-26583 | Critical | 9.8 | 2024-02-21 | In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which call… |
CVE-2024-0041 | High | 7.0 | 2024-02-16 | In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local… |
CVE-2023-41090 | Low | 1.8 | 2024-02-14 | Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2024-24255 | Medium | 4.2 | 2024-02-06 | A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended… |
CVE-2024-24254 | Medium | 4.2 | 2024-02-06 | PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp… |
CVE-2024-24864 | Medium | 5.3 | 2024-02-05 | A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null pointer dereference issue, possibly leadi… |
CVE-2024-24861 | Low | 3.3 | 2024-02-05 | A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow… |
CVE-2024-24860 | Medium | 4.6 | 2024-02-05 | A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference is… |
CVE-2024-24859 | Medium | 4.6 | 2024-02-05 | A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception is… |
CVE-2024-24858 | Medium | 4.6 | 2024-02-05 | A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcas… |
CVE-2024-24857 | Medium | 4.6 | 2024-02-05 | A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow i… |
CVE-2024-24855 | Medium | 5.0 | 2024-02-05 | A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference iss… |
CVE-2024-23196 | Medium | 5.3 | 2024-02-05 | A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can result in a null pointer dereference iss… |
CVE-2024-22386 | Medium | 5.3 | 2024-02-05 | A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer deref… |
CVE-2024-20007 | High | 7.5 | 2024-02-05 | In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution… |
CVE-2024-23651 | High | 8.7 | 2024-01-31 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in par… |
CVE-2023-6200 | High | 7.5 | 2024-01-28 | A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router adve… |
CVE-2024-0605 | High | 7.5 | 2024-01-22 | Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security me… |
CVE-2023-6531 | High | 7.0 | 2024-01-21 | A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()… |
CVE-2024-21601 | Medium | 5.9 | 2024-01-12 | A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the Flow-processing Daemon (flowd) of Juniper N… |
CVE-2023-42832 | High | 7.0 | 2024-01-10 | A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may… |
CVE-2023-49619 | Low | 3.1 | 2024-01-10 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. This issue affects Apache Answer… |
CVE-2024-21307 | High | 7.5 | 2024-01-09 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-20700 | High | 7.5 | 2024-01-09 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-3328 | High | 7.8 | 2024-01-08 | Race condition in snap-confine's must_mkdir_and_open_with_perms() |
CVE-2024-22047 | Low | 3.1 | 2024-01-04 | A race condition exists in Audited 4.0.0 to 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user. |
CVE-2023-33110 | High | 7.8 | 2024-01-02 | The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may… |
CVE-2016-15036 | Medium | 4.6 | 2023-12-23 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Deis Workflow Manager up to 2.3.2. It has been classified as problematic. This affects an unknown… |
CVE-2023-6546 | High | 7.0 | 2023-12-21 | A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same… |
CVE-2023-49706 | Medium | 6.8 | 2023-12-19 | Defective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote unauthenticated attackers to escalate privileges, thereby allowing… |
CVE-2023-6857 | Medium | 5.3 | 2023-12-19 | When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. *This bug only affects Firefox on Uni… |
CVE-2023-49786 | High | 7.5 | 2023-12-14 | Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1; as well as certified-aster… |
CVE-2023-45864 | Medium | 4.0 | 2023-12-13 | A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows unintended modifications of values with… |
CVE-2023-48420 | Medium | 6.4 | 2023-12-08 | there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User inte… |
CVE-2023-40077 | High | 8.1 | 2023-12-04 | In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no add… |
CVE-2023-45286 | Medium | 5.9 | 2023-11-28 | A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same… |
CVE-2023-4642 | Medium | 5.9 | 2023-11-27 | The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition. |
CVE-2023-30954 | Low | 2.7 | 2023-11-15 | The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not y… |
CVE-2023-5676 | Medium | 4.1 | 2023-11-15 | In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM… |
CVE-2023-46132 | High | 7.1 | 2023-11-14 | Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" results in a mol… |
CVE-2023-22310 | Medium | 6.5 | 2023-11-14 | Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local acces… |
CVE-2023-20571 | High | 8.1 | 2023-11-14 | A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in p… |
CVE-2023-36405 | High | 7.0 | 2023-11-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-6109 | Medium | 5.3 | 2023-11-14 | The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the a… |
CVE-2023-20902 | Medium | 5.9 | 2023-11-09 | A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below, Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network acc… |
CVE-2023-47111 | High | 7.3 | 2023-11-08 | ZITADEL provides identity infrastructure. ZITADEL provides administrators the possibility to define a `Lockout Policy` with a maximum amount of failed password… |
CVE-2022-48613 | Medium | 5.9 | 2023-11-08 | Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evalua… |
CVE-2023-41914 | High | 7.0 | 2023-11-03 | SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or dele… |
CVE-2023-3397 | High | 7.0 | 2023-11-01 | A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attac… |
CVE-2023-35645 | Medium | 6.4 | 2023-10-11 | In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-41774 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41773 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41771 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41770 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41769 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41768 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41767 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41765 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-38166 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-38159 | High | 7.0 | 2023-10-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-36902 | High | 7.0 | 2023-10-10 | Windows Runtime Remote Code Execution Vulnerability |
CVE-2023-36776 | High | 7.0 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |