CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 15)
Page 15 of 28 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-23393 | High | 7.0 | 2023-03-14 | Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability |
CVE-2022-48366 | Low | 3.7 | 2023-03-12 | An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack. |
CVE-2021-20251 | Medium | 5.9 | 2023-03-06 | A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are… |
CVE-2022-46713 | Medium | 4.7 | 2023-02-27 | A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be… |
CVE-2022-32844 | Medium | 6.3 | 2023-02-27 | A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app with arbitrary ker… |
CVE-2023-23039 | Medium | 5.7 | 2023-02-22 | An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate at… |
CVE-2020-19824 | High | 7.0 | 2023-02-17 | An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter. |
CVE-2022-32764 | High | 7.5 | 2023-02-16 | Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2022-47331 | Medium | 4.7 | 2023-02-12 | In wlan driver, there is a race condition. This could lead to local denial of service in wlan services. |
CVE-2023-0739 | Medium | 6.8 | 2023-02-08 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4. |
CVE-2022-42951 | High | 8.1 | 2023-02-06 | An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server n… |
CVE-2021-36532 | High | 8.1 | 2023-02-03 | Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php. |
CVE-2021-46873 | Medium | 5.3 | 2023-01-29 | WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a fu… |
CVE-2023-24042 | High | 7.5 | 2023-01-21 | A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten cont… |
CVE-2015-10067 | Medium | 4.6 | 2023-01-18 | A vulnerability was found in oznetmaster SSharpSmartThreadPool. It has been classified as problematic. This affects an unknown part of the file SSharpSmartThre… |
CVE-2023-22499 | High | 7.5 | 2023-01-17 | Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by… |
CVE-2022-4037 | Medium | 6.4 | 2023-01-12 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15… |
CVE-2023-21771 | High | 7.0 | 2023-01-10 | Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability |
CVE-2023-21766 | Medium | 4.7 | 2023-01-10 | Windows Overlay Filter Information Disclosure Vulnerability |
CVE-2023-21733 | High | 7.0 | 2023-01-10 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-21725 | Medium | 6.3 | 2023-01-10 | Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability |
CVE-2023-21679 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21546 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21542 | High | 7.0 | 2023-01-10 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-21536 | Medium | 4.7 | 2023-01-10 | Event Tracing for Windows Information Disclosure Vulnerability |
CVE-2023-21535 | High | 8.1 | 2023-01-10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-32645 | Medium | 4.1 | 2023-01-03 | In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges ne… |
CVE-2022-2742 | High | 8.8 | 2023-01-02 | Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2022-46174 | Medium | 4.2 | 2022-12-28 | efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS mount helper in efs-utils v… |
CVE-2022-2583 | Low | 3.7 | 2022-12-27 | A race condition can cause incorrect HTTP request routing. |
CVE-2022-42930 | High | 7.1 | 2022-12-22 | If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component. This vulnerability affec… |
CVE-2022-36318 | Medium | 5.3 | 2022-12-22 | When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox E… |
CVE-2022-22763 | High | 8.8 | 2022-12-22 | When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability a… |
CVE-2022-22746 | Medium | 5.9 | 2022-12-22 | A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>*This bug only… |
CVE-2022-22737 | High | 7.5 | 2022-12-22 | Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a p… |
CVE-2022-20567 | Medium | 6.4 | 2022-12-16 | In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System exec… |
CVE-2022-46689 | High | 7.0 | 2022-12-15 | A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, i… |
CVE-2022-42864 | High | 7.0 | 2022-12-15 | A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2… |
CVE-2022-44676 | High | 8.1 | 2022-12-13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-44669 | High | 7.0 | 2022-12-13 | Windows Error Reporting Elevation of Privilege Vulnerability |
CVE-2021-39660 | High | 7.0 | 2022-12-13 | In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalation of privilege… |
CVE-2022-42771 | Medium | 4.7 | 2022-12-06 | In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. |
CVE-2022-42770 | Medium | 4.7 | 2022-12-06 | In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. |
CVE-2022-39134 | Medium | 4.7 | 2022-12-06 | In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel. |
CVE-2022-32621 | Medium | 6.4 | 2022-12-05 | In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2022-45869 | Medium | 5.5 | 2022-11-30 | A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memo… |
CVE-2022-45888 | Medium | 6.4 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of… |
CVE-2022-45887 | Medium | 4.7 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_deta… |
CVE-2022-45886 | High | 7.0 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads… |
CVE-2022-45885 | High | 7.0 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a de… |
CVE-2022-45884 | High | 7.0 | 2022-11-25 | An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically all… |
CVE-2022-40130 | Medium | 4.3 | 2022-11-18 | Auth. (subscriber+) Race Condition vulnerability in WP-Polls plugin <= 2.76.0 on WordPress. |
CVE-2022-28768 | High | 8.8 | 2022-11-17 | The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability. A local… |
CVE-2022-41118 | High | 7.5 | 2022-11-09 | Windows Scripting Languages Remote Code Execution Vulnerability |
CVE-2022-41116 | Medium | 5.9 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
CVE-2022-41114 | High | 7.0 | 2022-11-09 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
CVE-2022-41100 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41093 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41090 | Medium | 5.9 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
CVE-2022-41088 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41086 | Medium | 6.4 | 2022-11-09 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-41045 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41044 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41039 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-38014 | High | 7.0 | 2022-11-09 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability |
CVE-2022-44563 | Medium | 5.9 | 2022-11-09 | There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-44551 | Critical | 9.8 | 2022-11-09 | The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availabilit… |
CVE-2022-39328 | Critical | 9.8 | 2022-11-08 | Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentic… |
CVE-2022-32613 | Medium | 6.4 | 2022-11-08 | In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32612 | Medium | 6.4 | 2022-11-08 | In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-42832 | Medium | 6.4 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42831 | Medium | 6.4 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able… |
CVE-2022-42806 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary… |
CVE-2022-42803 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 a… |
CVE-2022-42791 | High | 7.0 | 2022-11-01 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel… |
CVE-2022-3307 | High | 8.8 | 2022-11-01 | Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2022-32895 | Medium | 4.7 | 2022-11-01 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file… |
CVE-2022-44034 | Medium | 6.4 | 2022-10-30 | An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and resultant use-after-free if a physically pr… |
CVE-2022-44033 | Medium | 6.4 | 2022-10-30 | An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically pr… |
CVE-2022-44032 | Medium | 6.4 | 2022-10-30 | An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and resultant use-after-free if a physically pr… |
CVE-2022-3635 | Medium | 5.5 | 2022-10-21 | A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt… |
CVE-2022-3623 | Medium | 5.0 | 2022-10-20 | A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/g… |
CVE-2022-27626 | Critical | 10.0 | 2022-10-20 | A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functi… |
CVE-2022-22208 | Medium | 5.9 | 2022-10-18 | A Use After Free vulnerability in the Routing Protocol Daemon (rdp) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based a… |
CVE-2022-3567 | Medium | 4.6 | 2022-10-17 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the c… |
CVE-2022-3566 | Medium | 4.6 | 2022-10-17 | A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the compone… |
CVE-2022-3564 | Medium | 5.5 | 2022-10-17 | A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth… |
CVE-2022-3521 | Low | 2.6 | 2022-10-16 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c… |
CVE-2021-0696 | High | 7.0 | 2022-10-11 | In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no addition… |
CVE-2022-41035 | Medium | 5.3 | 2022-10-11 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-38047 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-38029 | High | 7.0 | 2022-10-11 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-38027 | High | 7.0 | 2022-10-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2022-38021 | High | 7.0 | 2022-10-11 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
CVE-2022-38000 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-33634 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-30198 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-24504 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-22035 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41850 | Medium | 4.7 | 2022-09-30 | roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations whe… |