CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 14)
Page 14 of 28 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36776 | High | 7.0 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36698 | Medium | 4.4 | 2023-10-10 | Windows Kernel Security Feature Bypass Vulnerability |
CVE-2023-38538 | Medium | 5.0 | 2023-10-04 | A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexp… |
CVE-2023-38537 | Medium | 5.6 | 2023-10-04 | A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have re… |
CVE-2023-4732 | Medium | 4.7 | 2023-10-03 | A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause… |
CVE-2023-5313 | Medium | 5.3 | 2023-09-30 | A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file aj… |
CVE-2023-42756 | Medium | 4.4 | 2023-09-28 | A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to th… |
CVE-2023-41979 | Medium | 4.7 | 2023-09-27 | A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An app may be able to modify protected parts of the file system. |
CVE-2023-41306 | Low | 3.7 | 2023-09-27 | Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice… |
CVE-2023-3301 | Medium | 5.6 | 2023-09-13 | A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has… |
CVE-2023-41915 | High | 8.1 | 2023-09-09 | OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code… |
CVE-2023-38616 | High | 7.0 | 2023-09-06 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be able to execute arbitrary code with kerne… |
CVE-2023-20835 | Medium | 6.4 | 2023-09-04 | In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20834 | Medium | 6.4 | 2023-09-04 | In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20827 | Medium | 6.4 | 2023-09-04 | In ims service, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-48566 | Medium | 5.9 | 2023-08-22 | An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variab… |
CVE-2023-21290 | Medium | 5.5 | 2023-08-14 | In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This could lead to local denial of service wit… |
CVE-2023-34438 | High | 7.5 | 2023-08-11 | Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-34349 | Medium | 4.6 | 2023-08-11 | Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-22276 | Medium | 6.5 | 2023-08-11 | Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentiall… |
CVE-2023-35378 | High | 7.0 | 2023-08-08 | Windows Projected File System Elevation of Privilege Vulnerability |
CVE-2023-20801 | Medium | 6.4 | 2023-08-07 | In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-4049 | Medium | 5.9 | 2023-08-01 | Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilit… |
CVE-2023-37904 | Low | 2.6 | 2023-07-28 | Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 of the `beta` and `tests-passed` branche… |
CVE-2023-33951 | Medium | 6.7 | 2023-07-24 | A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from i… |
CVE-2023-32258 | High | 8.1 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_C… |
CVE-2023-32257 | High | 8.1 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and… |
CVE-2023-38409 | Medium | 5.5 | 2023-07-17 | An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occurs only for the firs… |
CVE-2023-21262 | Low | 3.1 | 2023-07-13 | In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This… |
CVE-2022-48451 | Medium | 4.1 | 2023-07-12 | In bluetooth service, there is a possible out of bounds write due to race condition. This could lead to local denial of service with System execution privileg… |
CVE-2023-36884 | High | 7.5 | 2023-07-11 | Windows Search Remote Code Execution Vulnerability |
CVE-2023-35362 | High | 7.8 | 2023-07-11 | Windows Clip Service Elevation of Privilege Vulnerability |
CVE-2023-35361 | High | 7.0 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35360 | High | 7.0 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35351 | Medium | 6.6 | 2023-07-11 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability |
CVE-2023-35346 | Medium | 6.6 | 2023-07-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-35310 | Medium | 6.6 | 2023-07-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-35309 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-33170 | High | 8.1 | 2023-07-11 | ASP.NET and Visual Studio Security Feature Bypass Vulnerability |
CVE-2023-3108 | Medium | 6.2 | 2023-07-11 | A flaw was found in the subsequent get_user_pages_fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/al… |
CVE-2023-1672 | Medium | 5.3 | 2023-07-11 | A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys… |
CVE-2023-32254 | Critical | 9.8 | 2023-07-10 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT c… |
CVE-2023-32250 | Critical | 9.0 | 2023-07-10 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP com… |
CVE-2022-48509 | Medium | 5.9 | 2023-07-06 | Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may caus… |
CVE-2023-35863 | Medium | 5.3 | 2023-07-05 | In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an u… |
CVE-2023-2010 | Low | 3.1 | 2023-07-04 | The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. Thi… |
CVE-2023-20771 | Medium | 6.4 | 2023-07-04 | In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2023-21178 | Medium | 4.1 | 2023-06-28 | In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with Syst… |
CVE-2023-32413 | High | 7.0 | 2023-06-23 | A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, m… |
CVE-2023-35829 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c. |
CVE-2023-35828 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c. |
CVE-2023-35827 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. |
CVE-2023-35826 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c. |
CVE-2023-35824 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c. |
CVE-2023-35823 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c. |
CVE-2023-21101 | High | 7.0 | 2023-06-15 | In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2023-21095 | Medium | 4.7 | 2023-06-15 | In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local e… |
CVE-2022-31645 | High | 7.8 | 2023-06-14 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privileg… |
CVE-2023-20750 | Medium | 4.1 | 2023-06-06 | In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosure with System execution privileges need… |
CVE-2023-20736 | Medium | 6.4 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-29537 | High | 7.5 | 2023-06-02 | Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects F… |
CVE-2023-33974 | High | 7.5 | 2023-05-30 | RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and… |
CVE-2023-30571 | Low | 3.9 | 2023-05-29 | Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the… |
CVE-2023-2898 | Medium | 4.7 | 2023-05-26 | There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a… |
CVE-2023-28320 | Medium | 5.9 | 2023-05-26 | A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build tim… |
CVE-2023-31225 | Low | 3.3 | 2023-05-26 | The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability. |
CVE-2023-33203 | Medium | 6.4 | 2023-05-18 | The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker… |
CVE-2023-32570 | Medium | 5.9 | 2023-05-10 | VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit. |
CVE-2023-28126 | Medium | 5.9 | 2023-05-09 | An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser metho… |
CVE-2023-28125 | Medium | 5.9 | 2023-05-09 | An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access to the server by regi… |
CVE-2023-24903 | High | 8.1 | 2023-05-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2023-24899 | High | 7.0 | 2023-05-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-28201 | Critical | 9.8 | 2023-05-08 | This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadO… |
CVE-2023-27952 | Medium | 4.7 | 2023-05-08 | A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks. |
CVE-2023-21712 | High | 8.1 | 2023-04-27 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-2006 | High | 7.0 | 2023-04-24 | A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper loc… |
CVE-2023-31083 | Medium | 4.7 | 2023-04-24 | An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and… |
CVE-2023-28142 | Medium | 6.7 | 2023-04-18 | A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privile… |
CVE-2023-30543 | Medium | 5.2 | 2023-04-17 | @web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user changes chains as part of the connection… |
CVE-2023-28984 | Medium | 5.3 | 2023-04-17 | A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause… |
CVE-2023-26980 | High | 7.0 | 2023-04-14 | PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to… |
CVE-2023-1285 | High | 7.5 | 2023-04-14 | Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a r… |
CVE-2023-28308 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28307 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28306 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28305 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28278 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28273 | High | 7.0 | 2023-04-11 | Windows Clip Service Elevation of Privilege Vulnerability |
CVE-2023-28232 | High | 7.5 | 2023-04-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-20687 | Medium | 6.4 | 2023-04-06 | In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20686 | Medium | 6.4 | 2023-04-06 | In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20685 | Medium | 6.4 | 2023-04-06 | In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20684 | Medium | 6.4 | 2023-04-06 | In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-1582 | Medium | 4.7 | 2023-04-05 | A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user priv… |
CVE-2022-48221 | High | 7.5 | 2023-04-04 | An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user writable directory. Through a race conditi… |
CVE-2023-21031 | Medium | 4.7 | 2023-03-24 | In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional… |
CVE-2023-28144 | High | 7.0 | 2023-03-14 | KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and eleva… |
CVE-2023-24861 | High | 7.0 | 2023-03-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-23407 | High | 7.1 | 2023-03-14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
CVE-2023-23404 | High | 8.1 | 2023-03-14 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |