CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 15)
Page 15 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30205 | Medium | 6.6 | 2022-07-12 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-24800 | High | 8.1 | 2022-07-12 | October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prior to versions 1.0.476, 1.1.12, and 2.2… |
CVE-2022-21776 | Medium | 6.4 | 2022-07-06 | In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-21774 | Medium | 6.7 | 2022-07-06 | In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-21773 | Medium | 6.7 | 2022-07-06 | In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-21772 | Medium | 6.7 | 2022-07-06 | In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-21771 | Medium | 6.7 | 2022-07-06 | In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-20082 | High | 7.0 | 2022-07-06 | In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges ne… |
CVE-2022-30028 | Medium | 5.9 | 2022-06-24 | Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token. |
CVE-2022-33915 | High | 7.0 | 2022-06-17 | Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local… |
CVE-2022-30163 | High | 8.5 | 2022-06-15 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-20155 | High | 7.0 | 2022-06-15 | In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to… |
CVE-2022-20154 | Medium | 6.4 | 2022-06-15 | In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System executi… |
CVE-2022-20148 | Medium | 6.4 | 2022-06-15 | In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution… |
CVE-2022-20141 | High | 7.0 | 2022-06-15 | In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and clo… |
CVE-2022-22057 | High | 8.4 | 2022-06-14 | Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, S… |
CVE-2022-31758 | Medium | 4.7 | 2022-06-13 | The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-26362 | Medium | 6.4 | 2022-06-09 | x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to… |
CVE-2022-1462 | Medium | 6.3 | 2022-06-02 | An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK… |
CVE-2022-30128 | High | 8.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-30127 | High | 8.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-31015 | Medium | 6.5 | 2022-05-31 | Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket wh… |
CVE-2022-26765 | Medium | 4.7 | 2022-05-26 | A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A ma… |
CVE-2022-26701 | High | 7.5 | 2022-05-26 | A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be ab… |
CVE-2022-26690 | Medium | 4.7 | 2022-05-26 | Description: A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to modi… |
CVE-2021-3597 | Medium | 5.9 | 2022-05-24 | A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest thr… |
CVE-2021-3922 | High | 7.8 | 2022-05-18 | A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could a… |
CVE-2021-33078 | Medium | 4.7 | 2022-05-12 | Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to potentially enable deni… |
CVE-2021-33075 | Medium | 4.7 | 2022-05-12 | Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a privileged user to potentially… |
CVE-2022-29116 | Medium | 4.7 | 2022-05-10 | Windows Kernel Information Disclosure Vulnerability |
CVE-2022-29113 | High | 7.8 | 2022-05-10 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2022-20118 | High | 7.0 | 2022-05-10 | In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with… |
CVE-2022-20007 | High | 7.0 | 2022-05-10 | In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foregroun… |
CVE-2022-20006 | High | 7.0 | 2022-05-10 | In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condi… |
CVE-2022-20097 | Medium | 4.7 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with no additional execution… |
CVE-2022-20091 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-20090 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2021-4207 | High | 8.2 | 2022-04-29 | A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can… |
CVE-2022-1195 | Medium | 5.5 | 2022-04-29 | A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial… |
CVE-2022-1048 | High | 7.0 | 2022-04-29 | A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or simil… |
CVE-2022-29582 | High | 7.0 | 2022-04-22 | In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who h… |
CVE-2022-29527 | High | 7.0 | 2022-04-20 | Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges… |
CVE-2022-26904 | High | 7.0 | 2022-04-15 | Windows User Profile Service Elevation of Privilege Vulnerability |
CVE-2022-26829 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26828 | High | 7.0 | 2022-04-15 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2022-26827 | High | 7.0 | 2022-04-15 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
CVE-2022-26822 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26821 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26820 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26819 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26817 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26814 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26808 | High | 7.0 | 2022-04-15 | Windows File Explorer Elevation of Privilege Vulnerability |
CVE-2022-26807 | High | 7.0 | 2022-04-15 | Windows Work Folder Service Elevation of Privilege Vulnerability |
CVE-2022-24540 | High | 7.0 | 2022-04-15 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-24537 | High | 7.8 | 2022-04-15 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-24482 | High | 7.0 | 2022-04-15 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-22008 | High | 7.8 | 2022-04-15 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-20724 | Medium | 5.5 | 2022-04-15 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into… |
CVE-2022-27481 | Medium | 5.3 | 2022-04-12 | A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (Al… |
CVE-2022-20080 | Medium | 6.4 | 2022-04-11 | In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2022-20078 | Medium | 6.4 | 2022-04-11 | In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-20077 | Medium | 6.4 | 2022-04-11 | In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-28796 | High | 7.0 | 2022-04-08 | jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition. |
CVE-2022-26357 | High | 7.0 | 2022-04-05 | race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a phys… |
CVE-2018-25030 | Low | 3.3 | 2022-03-28 | A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race conditi… |
CVE-2021-4203 | Medium | 6.8 | 2022-03-25 | A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Lin… |
CVE-2021-4202 | High | 7.0 | 2022-03-25 | A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attac… |
CVE-2022-24302 | Medium | 5.9 | 2022-03-17 | In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure. |
CVE-2021-39792 | Medium | 4.1 | 2022-03-16 | In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information d… |
CVE-2021-39735 | Medium | 6.4 | 2022-03-16 | In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of p… |
CVE-2021-39727 | Medium | 4.1 | 2022-03-16 | In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information disclosure due to a race condition. Thi… |
CVE-2021-39713 | High | 7.0 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel |
CVE-2021-39712 | Medium | 6.4 | 2022-03-16 | In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System executio… |
CVE-2021-39686 | High | 7.0 | 2022-03-16 | In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation… |
CVE-2022-24751 | Medium | 5.4 | 2022-03-16 | Zulip is an open source group chat application. Starting with version 4.0 and prior to version 4.11, Zulip is vulnerable to a race condition during account dea… |
CVE-2022-23042 | High | 7.0 | 2022-03-10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilit… |
CVE-2022-23041 | High | 7.0 | 2022-03-10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilit… |
CVE-2022-23040 | High | 7.0 | 2022-03-10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilit… |
CVE-2022-23039 | High | 7.0 | 2022-03-10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilit… |
CVE-2022-23038 | High | 7.0 | 2022-03-10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilit… |
CVE-2022-23037 | High | 7.0 | 2022-03-10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilit… |
CVE-2022-23036 | High | 7.0 | 2022-03-10 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilit… |
CVE-2022-25822 | Medium | 4.0 | 2022-03-10 | An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash. |
CVE-2022-25090 | High | 8.1 | 2022-03-10 | Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escal… |
CVE-2022-24525 | High | 7.0 | 2022-03-09 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2022-24505 | High | 7.0 | 2022-03-09 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-23283 | High | 7.0 | 2022-03-09 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-21975 | Medium | 4.7 | 2022-03-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2021-3640 | High | 7.0 | 2022-03-03 | A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way trigge… |
CVE-2021-3609 | High | 7.0 | 2022-03-03 | .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash… |
CVE-2022-24986 | High | 7.8 | 2022-02-26 | KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created th… |
CVE-2022-0279 | Low | 3.1 | 2022-02-21 | The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user t… |
CVE-2021-20321 | Medium | 4.7 | 2022-02-18 | A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local use… |
CVE-2020-25719 | High | 7.2 | 2022-02-18 | A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become conf… |
CVE-2021-44731 | High | 7.8 | 2022-02-17 | A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain… |
CVE-2021-3753 | Medium | 4.7 | 2022-02-16 | A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to… |
CVE-2021-3752 | High | 7.1 | 2022-02-16 | A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a ra… |
CVE-2022-23639 | High | 8.1 | 2022-02-15 | crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to… |
CVE-2022-24686 | Medium | 5.9 | 2022-02-14 | HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client ag… |