CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 5)
Page 5 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-28551 | Medium | 4.7 | 2026-03-05 | Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-28549 | Medium | 6.6 | 2026-03-05 | Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-28550 | Medium | 4.0 | 2026-03-05 | Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-28545 | Medium | 5.9 | 2026-03-05 | Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-28544 | Medium | 6.2 | 2026-03-05 | Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-28543 | Medium | 4.4 | 2026-03-05 | Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-25674 | Low | 3.7 | 2026-03-03 | An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in D… |
CVE-2025-48641 | High | 7.0 | 2026-03-02 | In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional… |
CVE-2025-48577 | High | 7.4 | 2026-03-02 | In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privi… |
CVE-2025-48568 | High | 7.4 | 2026-03-02 | In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execu… |
CVE-2026-0995 | Low | 3.6 | 2026-03-02 | An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory access… |
CVE-2026-2802 | Medium | 4.2 | 2026-02-24 | Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
CVE-2026-27189 | Medium | 6.6 | 2026-02-21 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below, use non-atomic and insu… |
CVE-2026-26201 | High | 7.5 | 2026-02-19 | emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization a… |
CVE-2026-23207 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer check in IRQ handler Now that all other accesses to… |
CVE-2025-71221 | High | 7.8 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Add proper locking in mmp_p… |
CVE-2026-23169 | High | 7.8 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() syzbot and Eulgyu Kim reported crashes… |
CVE-2026-23167 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix race between rfkill and nci_unregister_device(). syzbot reported the splat… |
CVE-2026-23161 | High | 7.3 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix race of truncate and swap entry split The helper for shmem swap freei… |
CVE-2026-23153 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix race condition against transaction list The list of transaction is en… |
CVE-2026-23126 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix a race issue related to the operation on bpf_bound_progs list The netdevsi… |
CVE-2026-23118 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix data-race warning and potential load/store tearing Fix the following: … |
CVE-2026-23115 | Medium | 4.7 | 2026-02-14 | In the Linux kernel, the following vulnerability has been resolved: serial: Fix not set tty->port race condition Revert commit bfc467db60b7 ("serial: remove… |
CVE-2026-20677 | Critical | 9.0 | 2026-02-11 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS S… |
CVE-2026-20617 | High | 7.0 | 2026-02-11 | A race condition was addressed with improved state handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3… |
CVE-2026-2319 | High | 7.5 | 2026-02-11 | Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install a malicio… |
CVE-2025-69871 | High | 8.1 | 2026-02-11 | A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage() function of the promotion module. The function performs a n… |
CVE-2026-21237 | High | 7.0 | 2026-02-10 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Subsystem for Linux allows an authorized attacker to ele… |
CVE-2026-21234 | High | 7.0 | 2026-02-10 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized… |
CVE-2026-21231 | High | 7.8 | 2026-02-10 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
CVE-2025-31944 | Medium | 5.3 | 2026-02-10 | Race condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with a privileged user c… |
CVE-2025-30513 | High | 7.9 | 2026-02-10 | Race condition for some TDX Module within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined wi… |
CVE-2026-23684 | Medium | 5.9 | 2026-02-10 | A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being… |
CVE-2026-24930 | High | 8.4 | 2026-02-06 | UAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-25536 | High | 7.1 | 2026-02-04 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data lea… |
CVE-2026-23110 | Medium | 4.7 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Wake up the error handler when final completions race against each other The… |
CVE-2026-23071 | Medium | 4.7 | 2026-02-04 | In the Linux kernel, the following vulnerability has been resolved: regmap: Fix race condition in hwspinlock irqsave routine Previously, the address of the s… |
CVE-2026-22548 | Medium | 5.9 | 2026-02-04 | When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's control c… |
CVE-2026-24040 | Medium | 4.8 | 2026-02-02 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, the addJS method in the jspdf Node.js build utilizes a shared module-scoped variable (text)… |
CVE-2026-23004 | High | 7.8 | 2026-01-25 | In the Linux kernel, the following vulnerability has been resolved: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() syzbot was able to c… |
CVE-2026-22986 | Medium | 4.7 | 2026-01-23 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev->srcu If two drivers were calling gpiochip_add_data_… |
CVE-2025-15349 | High | 7.5 | 2026-01-23 | Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on af… |
CVE-2025-66803 | Medium | 4.8 | 2026-01-20 | Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout operations to fail when delayed frame responses reapply session… |
CVE-2026-23735 | | 2026-01-16 | GraphQL Modules is a toolset of libraries and guidelines dedicated to create reusable, maintainable, testable and extendable modules out of your GraphQL server… | |
CVE-2026-22856 | High | 8.1 | 2026-01-14 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free… |
CVE-2026-22851 | Medium | 5.9 | 2026-01-14 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SD… |
CVE-2025-68969 | Medium | 6.8 | 2026-01-14 | Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68962 | Medium | 5.1 | 2026-01-14 | Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68961 | Medium | 5.1 | 2026-01-14 | Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68960 | High | 8.4 | 2026-01-14 | Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68958 | High | 8.0 | 2026-01-14 | Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68957 | High | 8.4 | 2026-01-14 | Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68956 | High | 8.0 | 2026-01-14 | Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-68955 | High | 8.0 | 2026-01-14 | Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-21221 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2026-20934 | High | 7.5 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
CVE-2026-20927 | Medium | 5.3 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service… |
CVE-2026-20926 | High | 7.5 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
CVE-2026-20924 | High | 7.8 | 2026-01-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-20921 | High | 7.5 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
CVE-2026-20919 | High | 7.5 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
CVE-2026-20918 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20877 | High | 7.8 | 2026-01-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-20874 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20873 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20869 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacke… |
CVE-2026-20867 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20866 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20861 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
CVE-2026-20858 | High | 7.8 | 2026-01-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-20853 | High | 7.4 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows WalletService allows an unauthorized attacker to elevate… |
CVE-2026-20848 | High | 7.5 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
CVE-2026-20844 | High | 7.4 | 2026-01-13 | Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-20836 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile… |
CVE-2026-20830 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2026-20826 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an autho… |
CVE-2026-20815 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2026-20814 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile… |
CVE-2026-20808 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Printer Association Object allows an authorized attacker to elev… |
CVE-2025-71074 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: functionfs: fix the open/removal races ffs_epfile_open() can race with removal, ending up… |
CVE-2025-71066 | High | 7.8 | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change … |
CVE-2026-22702 | Medium | 4.5 | 2026-01-10 | virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtual… |
CVE-2026-22701 | Medium | 5.3 | 2026-01-10 | filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementati… |
CVE-2026-21697 | High | 8.1 | 2026-01-07 | axios4go is a Go HTTP client library. Prior to version 0.6.4, a race condition vulnerability exists in the shared HTTP client configuration. The global `defaul… |
CVE-2025-20801 | High | 7.0 | 2026-01-06 | In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obt… |
CVE-2025-52517 | Medium | 5.9 | 2026-01-05 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race condition in the iss… |
CVE-2025-52515 | Medium | 5.1 | 2026-01-05 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race condition in the iss… |
CVE-2025-15244 | Low | 3.7 | 2025-12-30 | A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race… |
CVE-2025-15242 | Low | 3.1 | 2025-12-30 | A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function of the component Coupon Handler. Performing a manipulation resul… |
CVE-2025-15116 | Low | 3.7 | 2025-12-28 | A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unknown functionality of the component Single-Use Coupon Handler… |
CVE-2025-68749 | High | 7.8 | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean during ta… |
CVE-2025-43531 | Low | 3.1 | 2025-12-17 | A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS… |
CVE-2025-68146 | Medium | 6.3 | 2025-12-16 | filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attacker… |
CVE-2025-33235 | High | 7.8 | 2025-12-16 | NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition. A successful exploit of… |
CVE-2025-68214 | Medium | 4.7 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition… |
CVE-2025-13231 | Medium | 6.5 | 2025-12-16 | The Fancy Product Designer plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.4.8. This is due to a time… |
CVE-2025-66446 | High | 8.8 | 2025-12-11 | MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dy… |
CVE-2025-66419 | High | 8.8 | 2025-12-11 | MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and esca… |
CVE-2025-36934 | High | 7.4 | 2025-12-11 | In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escal… |
CVE-2025-36916 | High | 7.0 | 2025-12-11 | In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with… |