CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 23)
Page 23 of 28 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-9718 | High | 7.0 | 2017-12-05 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a multimedia driver can pot… |
CVE-2017-9708 | High | 7.0 | 2017-12-05 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the camera driver, the function "msm_ois_pow… |
CVE-2017-9703 | High | 7.0 | 2017-12-05 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a Camera driver can lead to… |
CVE-2017-11049 | High | 7.0 | 2017-12-05 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a video driver, a race condition exists whic… |
CVE-2017-11045 | High | 7.0 | 2017-12-05 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, a race condition e… |
CVE-2017-11044 | High | 7.0 | 2017-12-05 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a KGSL driver function, a race condition exi… |
CVE-2017-16857 | High | 8.5 | 2017-12-05 | It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the back-end. This allows… |
CVE-2017-15357 | High | 7.4 | 2017-12-01 | The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater bina… |
CVE-2017-1000405 | High | 7.0 | 2017-11-30 | The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() ca… |
CVE-2017-8148 | Medium | 4.7 | 2017-11-22 | Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service (DoS) vulnerability. An attacker tricks a user into in… |
CVE-2017-8279 | High | 7.5 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, missing race condition protection while updatin… |
CVE-2017-11025 | High | 7.0 | 2017-11-16 | In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in the function audio_e… |
CVE-2017-2898 | High | 7.5 | 2017-11-07 | An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets… |
CVE-2017-16001 | High | 7.8 | 2017-11-06 | In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently subvert the plugin update process in orde… |
CVE-2017-15884 | High | 7.0 | 2017-10-31 | In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin update process in orde… |
CVE-2017-5068 | High | 7.5 | 2017-10-27 | Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condi… |
CVE-2017-5061 | Medium | 5.3 | 2017-10-27 | A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibo… |
CVE-2017-7115 | High | 8.1 | 2017-10-23 | An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. The issue involves the "Wi-Fi" component. It might al… |
CVE-2017-15649 | High | 7.8 | 2017-10-19 | net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishandling of packet_fano… |
CVE-2017-15588 | High | 7.8 | 2017-10-18 | An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause… |
CVE-2017-15265 | High | 7.0 | 2017-10-16 | Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspec… |
CVE-2017-11823 | Medium | 6.7 | 2017-10-13 | The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles W… |
CVE-2017-9697 | High | 7.0 | 2017-10-10 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition can allow access to already fr… |
CVE-2015-8239 | High | 7.0 | 2017-10-10 | The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them bef… |
CVE-2017-15038 | Medium | 5.6 | 2017-10-10 | Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from hos… |
CVE-2017-15037 | High | 8.1 | 2017-10-05 | In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p-… |
CVE-2017-1000112 | High | 7.0 | 2017-10-05 | Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_… |
CVE-2017-14955 | Medium | 5.9 | 2017-10-02 | Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain se… |
CVE-2017-14748 | Medium | 5.3 | 2017-09-26 | Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by lea… |
CVE-2017-1346 | Low | 2.5 | 2017-09-25 | IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user withi… |
CVE-2017-9677 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_length" could be acce… |
CVE-2017-9676 | Medium | 4.7 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing… |
CVE-2017-8281 | Medium | 4.7 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event… |
CVE-2017-8280 | High | 7.0 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some p… |
CVE-2015-1865 | Medium | 5.1 | 2017-09-20 | fts.c in coreutils 8.4 allows local users to delete arbitrary files. |
CVE-2017-14483 | Medium | 5.5 | 2017-09-15 | flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local u… |
CVE-2015-7553 | Medium | 4.7 | 2017-09-14 | Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users… |
CVE-2017-0161 | High | 8.1 | 2017-09-13 | The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8… |
CVE-2017-14317 | Medium | 5.6 | 2017-09-12 | A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxen… |
CVE-2017-0794 | High | 7.8 | 2017-09-08 | A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812. |
CVE-2017-12146 | High | 7.0 | 2017-09-08 | The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to gain privileges by leveraging a race cond… |
CVE-2015-5948 | High | 8.1 | 2017-09-06 | Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete fix for CV… |
CVE-2015-5947 | High | 8.1 | 2017-09-06 | SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. |
CVE-2015-1325 | High | 7.0 | 2017-08-25 | Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 a… |
CVE-2017-12136 | High | 7.8 | 2017-08-24 | Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and h… |
CVE-2017-9685 | High | 8.1 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Free condition. |
CVE-2017-9684 | High | 7.0 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free condition. |
CVE-2017-9682 | Medium | 4.7 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free cond… |
CVE-2017-8270 | High | 7.0 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free con… |
CVE-2017-8267 | High | 7.0 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer o… |
CVE-2017-8266 | High | 7.0 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-fr… |
CVE-2017-8265 | High | 7.0 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to a double free. |
CVE-2017-8262 | High | 7.0 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race condition can potentially… |
CVE-2017-8257 | High | 7.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with multip… |
CVE-2016-10383 | High | 8.1 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI. |
CVE-2017-0727 | High | 7.8 | 2017-08-09 | A elevation of privilege vulnerability in the Android media framework (libgui). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354. |
CVE-2017-7533 | High | 7.0 | 2017-08-05 | Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory cor… |
CVE-2015-7891 | High | 7.0 | 2017-08-02 | Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with Android L(5.0/5.1) allows local users to… |
CVE-2015-5191 | Medium | 6.7 | 2017-07-28 | VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation of… |
CVE-2015-7543 | High | 7.0 | 2017-07-25 | aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the tempor… |
CVE-2017-11353 | Medium | 5.9 | 2017-07-17 | yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories)… |
CVE-2016-4984 | Medium | 4.7 | 2017-07-17 | /usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which allows local users to obtain the TLS cer… |
CVE-2016-4982 | Medium | 4.7 | 2017-07-17 | authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creation of the key, and… |
CVE-2016-0764 | Medium | 6.2 | 2017-07-17 | Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linu… |
CVE-2014-7953 | High | 7.0 | 2017-07-07 | Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code… |
CVE-2017-10915 | Critical | 9.0 | 2017-07-05 | The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain X… |
CVE-2017-10914 | High | 8.1 | 2017-07-05 | The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory co… |
CVE-2017-8242 | Medium | 5.9 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write. |
CVE-2017-7372 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary… |
CVE-2017-7368 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver. |
CVE-2015-9022 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs. |
CVE-2014-9966 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display. |
CVE-2015-5232 | High | 8.1 | 2017-06-07 | Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197. |
CVE-2016-10297 | High | 7.0 | 2017-06-06 | In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist. |
CVE-2014-9941 | High | 7.0 | 2017-06-06 | In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially… |
CVE-2017-1000367 | Medium | 6.4 | 2017-06-05 | Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in informa… |
CVE-2017-6512 | Medium | 5.9 | 2017-06-01 | Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vec… |
CVE-2017-6979 | High | 7.0 | 2017-05-22 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS bef… |
CVE-2017-2533 | High | 7.0 | 2017-05-22 | An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allow… |
CVE-2017-2501 | High | 7.0 | 2017-05-22 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS bef… |
CVE-2016-10242 | High | 7.0 | 2017-05-16 | A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel. |
CVE-2015-8997 | High | 7.0 | 2017-05-16 | In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel. |
CVE-2015-8996 | High | 7.0 | 2017-05-16 | In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel. |
CVE-2014-9936 | High | 7.0 | 2017-05-16 | In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux k… |
CVE-2017-8244 | High | 7.0 | 2017-05-12 | In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->filled_size" co… |
CVE-2017-0343 | High | 7.0 | 2017-05-09 | All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) where user can trigger a race condition d… |
CVE-2016-9256 | High | 7.5 | 2017-05-09 | In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded b… |
CVE-2017-8342 | High | 8.1 | 2017-04-30 | Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method. |
CVE-2017-5035 | High | 8.1 | 2017-04-24 | Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site. |
CVE-2017-6615 | Medium | 6.3 | 2017-04-20 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial… |
CVE-2016-3106 | Medium | 5.3 | 2017-04-13 | Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner. |
CVE-2017-0462 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-7572 | High | 8.1 | 2017-04-06 | The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-… |
CVE-2017-2478 | High | 7.0 | 2017-04-02 | An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before… |
CVE-2017-2456 | High | 7.0 | 2017-04-02 | An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before… |
CVE-2017-2421 | High | 7.8 | 2017-04-02 | An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "AppleGraphicsPowerManagement" component. A race co… |
CVE-2017-5899 | High | 7.0 | 2017-03-27 | Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and… |
CVE-2015-8556 | Critical | 10.0 | 2017-03-24 | Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1. |
CVE-2017-6874 | High | 7.0 | 2017-03-14 | Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and system crash) or possi… |
CVE-2017-2636 | High | 7.0 | 2017-03-07 | Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by s… |