CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 17)
Page 17 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-29948 | Low | 2.5 | 2021-06-24 | Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replac… |
CVE-2021-24000 | Low | 3.1 | 2021-06-24 | A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate t… |
CVE-2021-22378 | Medium | 5.3 | 2021-06-22 | There is a race condition vulnerability in eCNS280_TD V100R005C00 and V100R005C10. There is a timing window exists in which the database can be operated by ano… |
CVE-2021-0565 | High | 7.0 | 2021-06-22 | In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no addi… |
CVE-2021-0564 | Medium | 6.4 | 2021-06-22 | In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execut… |
CVE-2021-24377 | High | 8.1 | 2021-06-21 | The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Import Settings' featur… |
CVE-2021-0533 | High | 7.0 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional… |
CVE-2021-0532 | High | 7.0 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional… |
CVE-2021-0520 | High | 7.0 | 2021-06-21 | In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation… |
CVE-2021-0509 | High | 7.0 | 2021-06-21 | In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2021-0508 | High | 7.0 | 2021-06-21 | In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no add… |
CVE-2021-0476 | High | 7.0 | 2021-06-11 | In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additio… |
CVE-2021-25395 | Medium | 6.4 | 2021-06-11 | A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised. |
CVE-2021-25394 | Medium | 6.4 | 2021-06-11 | A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compr… |
CVE-2020-8704 | Medium | 6.4 | 2021-06-09 | Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via loca… |
CVE-2020-8670 | Medium | 6.4 | 2021-06-09 | Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2021-1900 | High | 8.4 | 2021-06-09 | Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2020-11262 | High | 7.0 | 2021-06-09 | A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue. in Snapdragon… |
CVE-2020-11250 | High | 7.0 | 2021-06-09 | Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co… |
CVE-2021-30465 | High | 8.5 | 2021-05-27 | runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multipl… |
CVE-2020-25668 | High | 7.0 | 2021-05-26 | A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op. |
CVE-2020-15522 | Medium | 5.9 | 2021-05-20 | Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math li… |
CVE-2021-27925 | Medium | 4.4 | 2021-05-19 | An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can (depending… |
CVE-2021-32921 | Medium | 5.9 | 2021-05-13 | An issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for comparing certain secret strings when running under Lua 5.2 or… |
CVE-2021-20181 | High | 7.5 | 2021-05-13 | A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-afte… |
CVE-2021-32399 | High | 7.0 | 2021-05-10 | net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller. |
CVE-2021-27216 | Medium | 6.3 | 2021-05-06 | Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root… |
CVE-2021-0270 | High | 7.5 | 2021-04-22 | On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine (PFE) microkernel ar… |
CVE-2021-0258 | Medium | 5.9 | 2021-04-22 | A vulnerability in the forwarding of transit TCPv6 packets received on the Ethernet management interface of Juniper Networks Junos OS allows an attacker to tri… |
CVE-2021-0247 | Medium | 5.1 | 2021-04-22 | A Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization) vulnerability in the firewall process (dfwd) of Juniper Networks Ju… |
CVE-2021-0244 | High | 7.4 | 2021-04-22 | A signal handler race condition exists in the Layer 2 Address Learning Daemon (L2ALD) of Juniper Networks Junos OS due to the absence of a specific protection… |
CVE-2021-23133 | Medium | 6.7 | 2021-04-22 | A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service… |
CVE-2017-20004 | Medium | 5.9 | 2021-04-14 | In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any typ… |
CVE-2021-0443 | Medium | 4.7 | 2021-04-13 | In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to l… |
CVE-2021-0432 | High | 7.0 | 2021-04-13 | In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This could lead… |
CVE-2020-14104 | High | 8.1 | 2021-04-08 | A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50. |
CVE-2020-25584 | High | 7.5 | 2021-04-07 | In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE bef… |
CVE-2021-1806 | High | 7.0 | 2021-04-02 | A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojav… |
CVE-2020-27921 | High | 7.0 | 2021-04-02 | A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020… |
CVE-2021-25158 | Medium | 5.9 | 2021-03-30 | A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and be… |
CVE-2021-29265 | Medium | 4.7 | 2021-03-26 | An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GP… |
CVE-2020-25582 | High | 8.7 | 2021-03-26 | In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8) or killal… |
CVE-2020-25581 | High | 7.5 | 2021-03-26 | In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove… |
CVE-2021-20197 | Medium | 6.3 | 2021-03-26 | There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these uti… |
CVE-2020-35508 | Medium | 4.5 | 2021-03-26 | A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling… |
CVE-2021-28964 | Medium | 4.7 | 2021-03-22 | A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG)… |
CVE-2021-26569 | Critical | 9.8 | 2021-03-12 | Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to… |
CVE-2021-20261 | Medium | 6.4 | 2021-03-11 | A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the… |
CVE-2021-0387 | Medium | 6.4 | 2021-03-10 | In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with… |
CVE-2021-21166 | High | 8.8 | 2021-03-09 | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21165 | High | 8.8 | 2021-03-09 | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-35451 | Medium | 4.7 | 2021-03-09 | There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib d… |
CVE-2021-0401 | Medium | 6.4 | 2021-02-26 | In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-0367 | Medium | 6.4 | 2021-02-26 | In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-0366 | Medium | 6.4 | 2021-02-26 | In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2020-11277 | High | 7.4 | 2021-02-22 | Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Sna… |
CVE-2021-22974 | High | 7.5 | 2021-02-12 | On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an a… |
CVE-2021-21117 | High | 7.8 | 2021-02-09 | Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a cr… |
CVE-2021-3348 | High | 7.0 | 2021-02-01 | nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with a… |
CVE-2020-36203 | Medium | 4.7 | 2021-01-26 | An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption. |
CVE-2020-11152 | Medium | 6.4 | 2021-01-21 | Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, S… |
CVE-2020-11151 | Medium | 6.4 | 2021-01-21 | Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Com… |
CVE-2020-25533 | High | 7.0 | 2021-01-15 | An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch dae… |
CVE-2021-0320 | Medium | 4.7 | 2021-01-11 | In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys du… |
CVE-2021-0303 | High | 7.0 | 2021-01-11 | In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race… |
CVE-2020-17534 | High | 7.0 | 2021-01-11 | There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in `webkit` subproject of HTML/Java API ve… |
CVE-2020-16021 | High | 7.5 | 2021-01-08 | Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level p… |
CVE-2021-1061 | Medium | 6.3 | 2021-01-08 | NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously validated r… |
CVE-2018-20316 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an… |
CVE-2018-20315 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds… |
CVE-2018-20314 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow o… |
CVE-2018-20313 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow… |
CVE-2018-20312 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an… |
CVE-2018-20311 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or… |
CVE-2018-20310 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an… |
CVE-2018-20309 | High | 8.1 | 2021-01-07 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow… |
CVE-2020-35897 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race. |
CVE-2020-35886 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race. |
CVE-2020-35882 | High | 8.1 | 2020-12-31 | An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly ca… |
CVE-2020-35874 | High | 8.1 | 2020-12-31 | An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free. |
CVE-2020-35871 | High | 8.1 | 2020-12-31 | An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race. |
CVE-2020-35928 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/… |
CVE-2020-35914 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness. |
CVE-2020-35913 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockReadGuard unsoundness. |
CVE-2020-35912 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteGuard unsoundness. |
CVE-2020-35911 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGuard unsoundness. |
CVE-2020-35905 | Medium | 4.7 | 2020-12-31 | An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations (in safe code). |
CVE-2020-27837 | Medium | 6.4 | 2020-12-28 | A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a u… |
CVE-2020-27067 | Medium | 6.4 | 2020-12-15 | In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2020-0474 | High | 7.0 | 2020-12-15 | In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2020-27825 | Medium | 5.7 | 2020-12-11 | A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffe… |
CVE-2020-16123 | Medium | 4.4 | 2020-12-04 | An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming f… |
CVE-2020-29374 | Low | 3.6 | 2020-11-28 | An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for… |
CVE-2020-29372 | Medium | 4.7 | 2020-11-28 | An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORING_OP… |
CVE-2020-29370 | High | 7.0 | 2020-11-28 | An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7… |
CVE-2020-29369 | High | 7.0 | 2020-11-28 | An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand… |
CVE-2020-29368 | High | 7.0 | 2020-11-28 | An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write a… |
CVE-2020-27746 | Low | 3.7 | 2020-11-27 | Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race c… |
CVE-2020-25653 | Medium | 6.3 | 2020-11-26 | A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw may allow an unprivileged local guest u… |
CVE-2020-25651 | Medium | 6.4 | 2020-11-26 | A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate… |