CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 16)
Page 16 of 28 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41849 | Medium | 4.2 | 2022-09-30 | drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes… |
CVE-2022-41848 | Medium | 4.2 | 2022-09-30 | drivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker remo… |
CVE-2021-43980 | Low | 3.7 | 2022-09-28 | The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extrem… |
CVE-2022-3303 | Medium | 4.7 | 2022-09-27 | A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SND… |
CVE-2022-3071 | High | 8.8 | 2022-09-26 | Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific U… |
CVE-2022-3049 | High | 8.8 | 2022-09-26 | Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific… |
CVE-2022-3042 | High | 8.8 | 2022-09-26 | Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2022-2857 | High | 8.8 | 2022-09-26 | Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2854 | High | 8.8 | 2022-09-26 | Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-40310 | Medium | 4.3 | 2022-09-23 | Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease… |
CVE-2016-20015 | High | 7.5 | 2022-09-20 | In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for… |
CVE-2022-39006 | Medium | 5.9 | 2022-09-16 | The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2021-0697 | High | 7.0 | 2022-09-13 | In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2022-34725 | High | 7.0 | 2022-09-13 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-26928 | High | 7.0 | 2022-09-13 | Windows Photo Import API Elevation of Privilege Vulnerability |
CVE-2022-36422 | Medium | 4.3 | 2022-09-09 | Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin <= 1.89 at WordPress. |
CVE-2022-40307 | Medium | 4.7 | 2022-09-09 | An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free. |
CVE-2022-26450 | Medium | 6.4 | 2022-09-06 | In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-39188 | Medium | 4.7 | 2022-09-02 | An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device… |
CVE-2022-1729 | High | 7.0 | 2022-09-01 | A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to buil… |
CVE-2022-3028 | High | 7.0 | 2022-08-31 | A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simulta… |
CVE-2022-2590 | High | 7.0 | 2022-08-31 | A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shared memory mappings… |
CVE-2022-1247 | High | 7.0 | 2022-08-31 | An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects are using t… |
CVE-2022-2961 | High | 7.0 | 2022-08-29 | A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously t… |
CVE-2022-0207 | Medium | 4.7 | 2022-08-26 | A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text. |
CVE-2022-2959 | High | 7.0 | 2022-08-25 | A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe… |
CVE-2021-3702 | Medium | 6.3 | 2022-08-23 | A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their dir… |
CVE-2021-20316 | Medium | 6.8 | 2022-08-23 | A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata… |
CVE-2022-24951 | High | 7.0 | 2022-08-16 | A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Et… |
CVE-2022-24950 | High | 7.5 | 2022-08-16 | A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabl… |
CVE-2022-24949 | High | 7.5 | 2022-08-16 | A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logi… |
CVE-2022-2623 | High | 8.8 | 2022-08-12 | Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interact… |
CVE-2022-2617 | High | 8.8 | 2022-08-12 | Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potential… |
CVE-2022-2609 | High | 8.8 | 2022-08-12 | Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user i… |
CVE-2022-2608 | High | 8.8 | 2022-08-12 | Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user… |
CVE-2022-2607 | High | 8.8 | 2022-08-12 | Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user inte… |
CVE-2022-20256 | Medium | 6.4 | 2022-08-12 | In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-20373 | Medium | 6.4 | 2022-08-11 | In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege w… |
CVE-2022-20344 | High | 7.0 | 2022-08-10 | In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This could lead to local es… |
CVE-2022-35796 | High | 7.5 | 2022-08-09 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-34702 | High | 8.1 | 2022-08-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-34696 | High | 7.8 | 2022-08-09 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-33636 | High | 8.3 | 2022-08-09 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2022-37035 | High | 8.1 | 2022-08-02 | An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-… |
CVE-2022-26428 | Medium | 6.4 | 2022-08-01 | In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-21789 | Medium | 6.4 | 2022-08-01 | In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-2160 | Medium | 6.5 | 2022-07-28 | Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious… |
CVE-2020-36558 | Medium | 5.1 | 2022-07-21 | A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. |
CVE-2020-36557 | Medium | 5.1 | 2022-07-21 | A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. |
CVE-2022-34892 | High | 7.8 | 2022-07-18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must firs… |
CVE-2022-30214 | Medium | 6.6 | 2022-07-12 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-30212 | Medium | 4.7 | 2022-07-12 | Windows Connected Devices Platform Service Information Disclosure Vulnerability |
CVE-2022-30205 | Medium | 6.6 | 2022-07-12 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-24800 | High | 8.1 | 2022-07-12 | October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prior to versions 1.0.476, 1.1.12, and 2.2… |
CVE-2022-21776 | Medium | 6.4 | 2022-07-06 | In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-21774 | Medium | 6.7 | 2022-07-06 | In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-21773 | Medium | 6.7 | 2022-07-06 | In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-21772 | Medium | 6.7 | 2022-07-06 | In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-21771 | Medium | 6.7 | 2022-07-06 | In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-20082 | High | 7.0 | 2022-07-06 | In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges ne… |
CVE-2022-30028 | Medium | 5.9 | 2022-06-24 | Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token. |
CVE-2022-33915 | High | 7.0 | 2022-06-17 | Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local… |
CVE-2022-30163 | High | 8.5 | 2022-06-15 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-20155 | High | 7.0 | 2022-06-15 | In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to… |
CVE-2022-20154 | Medium | 6.4 | 2022-06-15 | In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System executi… |
CVE-2022-20148 | Medium | 6.4 | 2022-06-15 | In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution… |
CVE-2022-20141 | High | 7.0 | 2022-06-15 | In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and clo… |
CVE-2022-22057 | High | 8.4 | 2022-06-14 | Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, S… |
CVE-2022-31758 | Medium | 4.7 | 2022-06-13 | The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-26362 | Medium | 6.4 | 2022-06-09 | x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to… |
CVE-2022-1462 | Medium | 6.3 | 2022-06-02 | An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK… |
CVE-2022-30128 | High | 8.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-30127 | High | 8.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-31015 | Medium | 6.5 | 2022-05-31 | Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket wh… |
CVE-2022-26765 | Medium | 4.7 | 2022-05-26 | A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A ma… |
CVE-2022-26701 | High | 7.5 | 2022-05-26 | A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be ab… |
CVE-2022-26690 | Medium | 4.7 | 2022-05-26 | Description: A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to modi… |
CVE-2021-3597 | Medium | 5.9 | 2022-05-24 | A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest thr… |
CVE-2021-3922 | High | 7.8 | 2022-05-18 | A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could a… |
CVE-2021-33078 | Medium | 4.7 | 2022-05-12 | Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to potentially enable deni… |
CVE-2021-33075 | Medium | 4.7 | 2022-05-12 | Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a privileged user to potentially… |
CVE-2022-29116 | Medium | 4.7 | 2022-05-10 | Windows Kernel Information Disclosure Vulnerability |
CVE-2022-29113 | High | 7.8 | 2022-05-10 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2022-20118 | High | 7.0 | 2022-05-10 | In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with… |
CVE-2022-20007 | High | 7.0 | 2022-05-10 | In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foregroun… |
CVE-2022-20006 | High | 7.0 | 2022-05-10 | In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condi… |
CVE-2022-20097 | Medium | 4.7 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with no additional execution… |
CVE-2022-20091 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-20090 | Medium | 6.4 | 2022-05-03 | In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2021-4207 | High | 8.2 | 2022-04-29 | A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can… |
CVE-2022-1195 | Medium | 5.5 | 2022-04-29 | A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial… |
CVE-2022-1048 | High | 7.0 | 2022-04-29 | A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or simil… |
CVE-2022-29582 | High | 7.0 | 2022-04-22 | In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who h… |
CVE-2022-29527 | High | 7.0 | 2022-04-20 | Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges… |
CVE-2022-26904 | High | 7.0 | 2022-04-15 | Windows User Profile Service Elevation of Privilege Vulnerability |
CVE-2022-26829 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26828 | High | 7.0 | 2022-04-15 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2022-26827 | High | 7.0 | 2022-04-15 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
CVE-2022-26822 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26821 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |