CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 16)
Page 16 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-20032 | Medium | 4.1 | 2022-02-09 | In vow driver, there is a possible memory corruption due to a race condition. This could lead to local information disclosure with System execution privileges… |
CVE-2021-40015 | Medium | 4.7 | 2022-02-09 | There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability. |
CVE-2022-24114 | High | 7.0 | 2022-02-04 | Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before… |
CVE-2021-34406 | Medium | 4.7 | 2022-01-18 | NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a syst… |
CVE-2021-4083 | High | 7.0 | 2022-01-18 | A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget()… |
CVE-2021-39679 | High | 7.0 | 2022-01-14 | In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2021-39629 | High | 7.0 | 2022-01-14 | In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privil… |
CVE-2021-30313 | Medium | 6.7 | 2022-01-13 | Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2022-21896 | High | 7.0 | 2022-01-11 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2022-21881 | High | 7.0 | 2022-01-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2021-43566 | Low | 2.5 | 2022-01-11 | All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the serv… |
CVE-2021-37134 | High | 8.1 | 2022-01-03 | Location-related APIs exists a Race Condition vulnerability.Successful exploitation of this vulnerability may use Higher Permissions for invoking the interface… |
CVE-2021-45710 | High | 8.1 | 2021-12-27 | An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot… |
CVE-2021-45704 | High | 8.1 | 2021-12-27 | An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket<T> unconditionally imp… |
CVE-2017-13905 | High | 8.1 | 2021-12-23 | A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 2017-002 Sier… |
CVE-2021-44733 | High | 7.0 | 2021-12-22 | A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_g… |
CVE-2020-35216 | Medium | 5.9 | 2021-12-16 | An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages. |
CVE-2021-39648 | Medium | 4.1 | 2021-12-15 | In gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information d… |
CVE-2021-39642 | Medium | 6.4 | 2021-12-15 | In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of priv… |
CVE-2021-0955 | High | 7.0 | 2021-12-15 | In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additi… |
CVE-2021-0920 | Medium | 6.4 | 2021-12-15 | In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System e… |
CVE-2021-43538 | Medium | 4.3 | 2021-12-08 | By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock… |
CVE-2021-41025 | High | 7.3 | 2021-12-08 | Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6… |
CVE-2021-37074 | High | 8.1 | 2021-12-08 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation. |
CVE-2021-37069 | High | 7.4 | 2021-12-08 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected. |
CVE-2021-37085 | Medium | 5.9 | 2021-12-07 | There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service. |
CVE-2021-37082 | Medium | 5.9 | 2021-12-07 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash. |
CVE-2021-37073 | Low | 3.7 | 2021-12-07 | There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the detection result is tampered with. |
CVE-2021-44513 | High | 7.0 | 2021-12-07 | Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling. |
CVE-2020-12951 | High | 7.0 | 2021-11-16 | Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations. |
CVE-2021-43411 | High | 7.5 | 2021-11-07 | An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already has the n… |
CVE-2021-37991 | High | 7.5 | 2021-11-02 | Race in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-36181 | Low | 3.1 | 2021-11-02 | A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal b… |
CVE-2021-36808 | Medium | 5.9 | 2021-10-30 | A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115. |
CVE-2021-36994 | Low | 3.7 | 2021-10-28 | There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of… |
CVE-2021-36987 | Medium | 5.9 | 2021-10-28 | There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploitation of this vuln… |
CVE-2021-0870 | High | 8.1 | 2021-10-22 | In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no addition… |
CVE-2021-0652 | High | 7.8 | 2021-10-22 | In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. T… |
CVE-2021-0483 | High | 7.8 | 2021-10-22 | In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with User ex… |
CVE-2021-31382 | Medium | 6.5 | 2021-10-19 | On PTX1000 System, PTX10002-60C System, after upgrading to an affected release, a Race Condition vulnerability between the chassis daemon (chassisd) and firewa… |
CVE-2021-31364 | Medium | 5.9 | 2021-10-19 | An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on… |
CVE-2021-0298 | Medium | 4.7 | 2021-10-19 | A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (… |
CVE-2011-1075 | Low | 3.7 | 2021-10-19 | FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new version in. In parti… |
CVE-2020-29622 | High | 7.5 | 2021-10-19 | A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-005 Catalina. Mounting a maliciously crafted NFS network… |
CVE-2021-35494 | Medium | 5.7 | 2021-10-12 | The Rest API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server… |
CVE-2021-0688 | High | 7.0 | 2021-10-06 | In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with Us… |
CVE-2021-39212 | Medium | 4.4 | 2021-09-13 | ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and… |
CVE-2021-1958 | Medium | 6.7 | 2021-09-09 | A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdra… |
CVE-2021-30714 | Medium | 6.3 | 2021-09-08 | A race condition was addressed with improved state handling. This issue is fixed in iOS 14.6 and iPadOS 14.6. An application may be able to cause unexpected sy… |
CVE-2021-30652 | High | 7.0 | 2021-09-08 | A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5… |
CVE-2021-22004 | Medium | 6.4 | 2021-09-08 | An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in… |
CVE-2021-1884 | Medium | 5.9 | 2021-09-08 | A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security U… |
CVE-2021-30786 | High | 7.0 | 2021-09-08 | A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Opening a maliciously crafted PDF file may le… |
CVE-2021-28701 | High | 7.8 | 2021-09-08 | Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated… |
CVE-2021-40490 | High | 7.0 | 2021-09-03 | A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. |
CVE-2021-31797 | Medium | 5.1 | 2021-09-02 | The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to password disclos… |
CVE-2021-28697 | High | 7.8 | 2021-08-27 | grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pag… |
CVE-2021-30603 | High | 7.5 | 2021-08-26 | Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-31004 | High | 7.0 | 2021-08-24 | A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5. An application may be able to gain elev… |
CVE-2021-30996 | High | 7.0 | 2021-08-24 | A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2. A malicious application may… |
CVE-2021-30995 | High | 7.0 | 2021-08-24 | A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-… |
CVE-2021-30984 | High | 7.5 | 2021-08-24 | A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watc… |
CVE-2021-30982 | Medium | 5.9 | 2021-08-24 | A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A re… |
CVE-2021-30955 | High | 7.0 | 2021-08-24 | A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A ma… |
CVE-2021-30933 | High | 7.0 | 2021-08-24 | A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6. A malicious application may be a… |
CVE-2021-30923 | High | 7.0 | 2021-08-24 | A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to execute arbitrary co… |
CVE-2021-30899 | High | 7.0 | 2021-08-24 | A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11… |
CVE-2021-30868 | High | 7.0 | 2021-08-24 | A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. A malicious application may be able t… |
CVE-2021-30857 | High | 7.0 | 2021-08-24 | A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and i… |
CVE-2021-29986 | High | 8.1 | 2021-08-17 | A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affected Linux operati… |
CVE-2021-3573 | Medium | 6.4 | 2021-08-13 | A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers… |
CVE-2021-38587 | High | 7.5 | 2021-08-11 | In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586). |
CVE-2021-38191 | Medium | 5.9 | 2021-08-08 | An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread. |
CVE-2021-36221 | Medium | 5.9 | 2021-08-08 | Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort. |
CVE-2020-36458 | High | 8.1 | 2021-08-08 | An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult<T, E>, there is an implementation of Sync with a trait bound of T: Sen… |
CVE-2020-36454 | High | 8.1 | 2021-08-08 | An issue was discovered in the parc crate through 2020-11-14 for Rust. LockWeak<T> has an unconditional implementation of Send without trait bounds on T. |
CVE-2020-36447 | High | 8.1 | 2021-08-08 | An issue was discovered in the v9 crate through 2020-12-18 for Rust. There is an unconditional implementation of Sync for SyncRef<T>. |
CVE-2020-36446 | High | 8.1 | 2021-08-08 | An issue was discovered in the signal-simple crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for SyncChannel<T>. |
CVE-2020-36445 | High | 8.1 | 2021-08-08 | An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for ConVec<T>. |
CVE-2020-36444 | High | 8.1 | 2021-08-08 | An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard<RC, T> without trait bounds on RC. |
CVE-2020-36442 | High | 8.1 | 2021-08-08 | An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait. |
CVE-2020-36441 | High | 8.1 | 2021-08-08 | An issue was discovered in the abox crate before 0.4.1 for Rust. It implements Send and Sync for AtomicBox<T> with no requirement for T: Send and T: Sync. |
CVE-2020-36440 | High | 8.1 | 2021-08-08 | An issue was discovered in the libsbc crate before 0.1.5 for Rust. For Decoder<R>, it implements Send for any R: Read. |
CVE-2020-36439 | High | 8.1 | 2021-08-08 | An issue was discovered in the ticketed_lock crate before 0.3.0 for Rust. There are unconditional implementations of Send for ReadTicket<T> and WriteTicket<T>. |
CVE-2020-36438 | High | 8.1 | 2021-08-08 | An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and Sync traits. |
CVE-2020-36437 | High | 8.1 | 2021-08-08 | An issue was discovered in the conqueue crate before 0.4.0 for Rust. There are unconditional implementations of Send and Sync for QueueSender<T>. |
CVE-2020-36436 | High | 8.1 | 2021-08-08 | An issue was discovered in the unicycle crate before 0.7.1 for Rust. PinSlab<T> and Unordered<T, S> do not have bounds on their Send and Sync traits. |
CVE-2020-36435 | High | 8.1 | 2021-08-08 | An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks. |
CVE-2021-32810 | Critical | 9.8 | 2021-08-02 | crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions prior to 0.7.4 and 0.8.0, the result of… |
CVE-2021-22428 | High | 8.1 | 2021-08-02 | There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. |
CVE-2021-22427 | High | 8.1 | 2021-08-02 | There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. |
CVE-2021-22384 | High | 8.1 | 2021-08-02 | There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. |
CVE-2021-32686 | Medium | 5.9 | 2021-07-23 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN… |
CVE-2021-34462 | High | 7.0 | 2021-07-16 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
CVE-2021-0514 | High | 8.1 | 2021-07-14 | In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged… |
CVE-2020-29014 | Medium | 6.3 | 2021-07-09 | A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3.2.2 may allow an au… |
CVE-2021-22340 | Medium | 4.1 | 2021-06-29 | There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker wi… |
CVE-2021-21005 | High | 7.5 | 2021-06-25 | In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-P… |
CVE-2021-31615 | Medium | 5.3 | 2021-06-25 | Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet durin… |
CVE-2021-29952 | High | 7.5 | 2021-06-24 | When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploit… |