CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 14)
Page 14 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28768 | High | 8.8 | 2022-11-17 | The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability. A local… |
CVE-2022-41118 | High | 7.5 | 2022-11-09 | Windows Scripting Languages Remote Code Execution Vulnerability |
CVE-2022-41116 | Medium | 5.9 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
CVE-2022-41114 | High | 7.0 | 2022-11-09 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
CVE-2022-41100 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41093 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41090 | Medium | 5.9 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
CVE-2022-41088 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41086 | Medium | 6.4 | 2022-11-09 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-41045 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41044 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41039 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-38014 | High | 7.0 | 2022-11-09 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability |
CVE-2022-44563 | Medium | 5.9 | 2022-11-09 | There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-44551 | Critical | 9.8 | 2022-11-09 | The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availabilit… |
CVE-2022-39328 | Critical | 9.8 | 2022-11-08 | Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentic… |
CVE-2022-32613 | Medium | 6.4 | 2022-11-08 | In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32612 | Medium | 6.4 | 2022-11-08 | In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-42832 | Medium | 6.4 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42831 | Medium | 6.4 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42806 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary… |
CVE-2022-42803 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 a… |
CVE-2022-42791 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel… |
CVE-2022-3307 | High | 8.8 | 2022-11-01 | Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2022-32895 | Medium | 4.7 | 2022-11-01 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file… |
CVE-2022-44034 | Medium | 6.4 | 2022-10-30 | An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and resultant use-after-free if a physically pr… |
CVE-2022-44033 | Medium | 6.4 | 2022-10-30 | An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically pr… |
CVE-2022-44032 | Medium | 6.4 | 2022-10-30 | An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and resultant use-after-free if a physically pr… |
CVE-2022-3635 | Medium | 5.5 | 2022-10-21 | A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt… |
CVE-2022-3623 | Medium | 5.0 | 2022-10-20 | A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/g… |
CVE-2022-27626 | Critical | 10.0 | 2022-10-20 | A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functi… |
CVE-2022-22208 | Medium | 5.9 | 2022-10-18 | A Use After Free vulnerability in the Routing Protocol Daemon (rdp) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based a… |
CVE-2022-3567 | Medium | 4.6 | 2022-10-17 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the c… |
CVE-2022-3566 | Medium | 4.6 | 2022-10-17 | A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the compone… |
CVE-2022-3564 | Medium | 5.5 | 2022-10-17 | A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth… |
CVE-2022-3521 | Low | 2.6 | 2022-10-16 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c… |
CVE-2021-0696 | High | 7.0 | 2022-10-11 | In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no addition… |
CVE-2022-41035 | Medium | 5.3 | 2022-10-11 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-38047 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-38029 | High | 7.0 | 2022-10-11 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-38027 | High | 7.0 | 2022-10-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2022-38021 | High | 7.0 | 2022-10-11 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
CVE-2022-38000 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-33634 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-30198 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-24504 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-22035 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41850 | Medium | 4.7 | 2022-09-30 | roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations whe… |
CVE-2022-41849 | Medium | 4.2 | 2022-09-30 | drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes… |
CVE-2022-41848 | Medium | 4.2 | 2022-09-30 | drivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker remo… |
CVE-2021-43980 | Low | 3.7 | 2022-09-28 | The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extrem… |
CVE-2022-3303 | Medium | 4.7 | 2022-09-27 | A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SND… |
CVE-2022-3071 | High | 8.8 | 2022-09-26 | Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific U… |
CVE-2022-3049 | High | 8.8 | 2022-09-26 | Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific… |
CVE-2022-3042 | High | 8.8 | 2022-09-26 | Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2022-2857 | High | 8.8 | 2022-09-26 | Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2854 | High | 8.8 | 2022-09-26 | Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-40310 | Medium | 4.3 | 2022-09-23 | Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease… |
CVE-2016-20015 | High | 7.5 | 2022-09-20 | In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for… |
CVE-2022-39006 | Medium | 5.9 | 2022-09-16 | The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2021-0697 | High | 7.0 | 2022-09-13 | In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2022-34725 | High | 7.0 | 2022-09-13 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-26928 | High | 7.0 | 2022-09-13 | Windows Photo Import API Elevation of Privilege Vulnerability |
CVE-2022-36422 | Medium | 4.3 | 2022-09-09 | Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin <= 1.89 at WordPress. |
CVE-2022-40307 | Medium | 4.7 | 2022-09-09 | An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free. |
CVE-2022-26450 | Medium | 6.4 | 2022-09-06 | In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-39188 | Medium | 4.7 | 2022-09-02 | An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device… |
CVE-2022-1729 | High | 7.0 | 2022-09-01 | A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to buil… |
CVE-2022-3028 | High | 7.0 | 2022-08-31 | A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simulta… |
CVE-2022-2590 | High | 7.0 | 2022-08-31 | A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shared memory mappings… |
CVE-2022-1247 | High | 7.0 | 2022-08-31 | An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects are using t… |
CVE-2022-2961 | High | 7.0 | 2022-08-29 | A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously t… |
CVE-2022-0207 | Medium | 4.7 | 2022-08-26 | A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text. |
CVE-2022-2959 | High | 7.0 | 2022-08-25 | A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe… |
CVE-2021-3702 | Medium | 6.3 | 2022-08-23 | A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their dir… |
CVE-2021-20316 | Medium | 6.8 | 2022-08-23 | A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata… |
CVE-2022-24951 | High | 7.0 | 2022-08-16 | A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Et… |
CVE-2022-24950 | High | 7.5 | 2022-08-16 | A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabl… |
CVE-2022-24949 | High | 7.5 | 2022-08-16 | A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logi… |
CVE-2022-2623 | High | 8.8 | 2022-08-12 | Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interact… |
CVE-2022-2617 | High | 8.8 | 2022-08-12 | Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potential… |
CVE-2022-2609 | High | 8.8 | 2022-08-12 | Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user i… |
CVE-2022-2608 | High | 8.8 | 2022-08-12 | Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user… |
CVE-2022-2607 | High | 8.8 | 2022-08-12 | Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user inte… |
CVE-2022-20256 | Medium | 6.4 | 2022-08-12 | In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-20373 | Medium | 6.4 | 2022-08-11 | In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege w… |
CVE-2022-20344 | High | 7.0 | 2022-08-10 | In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This could lead to local es… |
CVE-2022-35796 | High | 7.5 | 2022-08-09 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-34702 | High | 8.1 | 2022-08-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-34696 | High | 7.8 | 2022-08-09 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-33636 | High | 8.3 | 2022-08-09 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2022-37035 | High | 8.1 | 2022-08-02 | An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-… |
CVE-2022-26428 | Medium | 6.4 | 2022-08-01 | In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-21789 | Medium | 6.4 | 2022-08-01 | In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-2160 | Medium | 6.5 | 2022-07-28 | Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious… |
CVE-2020-36558 | Medium | 5.1 | 2022-07-21 | A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. |
CVE-2020-36557 | Medium | 5.1 | 2022-07-21 | A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. |
CVE-2022-34892 | High | 7.8 | 2022-07-18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must firs… |
CVE-2022-30214 | Medium | 6.6 | 2022-07-12 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-30212 | Medium | 4.7 | 2022-07-12 | Windows Connected Devices Platform Service Information Disclosure Vulnerability |