CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 8)
Page 8 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-0372 | | 2025-05-21 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Esca… | |
CVE-2025-37988 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() Normally do_lock_mo… |
CVE-2025-37985 | Medium | 4.7 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdm_open and wdm_wwan_port_stop Clearing WDM_WWAN_IN_USE mus… |
CVE-2025-37920 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AF_XDP generic RX path Move rx_lock from xsk_socket to xsk_buf… |
CVE-2025-37906 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd ublk_cancel_cmd(… |
CVE-2025-32421 | Low | 3.7 | 2025-05-14 | Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue onl… |
CVE-2025-20104 | High | 7.3 | 2025-05-13 | Race condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user to potentially enabl… |
CVE-2025-20039 | Medium | 6.6 | 2025-05-13 | Race condition for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial… |
CVE-2025-30394 | Medium | 5.9 | 2025-05-13 | Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. |
CVE-2025-29841 | High | 7.0 | 2025-05-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker… |
CVE-2025-27468 | High | 7.0 | 2025-05-13 | Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2025-47735 | Low | 2.9 | 2025-05-09 | inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization. |
CVE-2025-46336 | Medium | 4.2 | 2025-05-08 | Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware… |
CVE-2025-32441 | Medium | 4.2 | 2025-05-07 | Rack is a modular Ruby web server interface. Prior to version 2.2.14, when using the `Rack::Session::Pool` middleware, simultaneous rack requests can restore a… |
CVE-2025-47545 | Medium | 5.3 | 2025-05-07 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro Poll Maker poll-maker allows Leveraging Ra… |
CVE-2025-1493 | Medium | 5.3 | 2025-05-05 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service du… |
CVE-2023-53094 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsl_lpuart: fix race on RX DMA shutdown From time to time DMA completion can… |
CVE-2023-53047 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: tee: amdtee: fix race condition in amdtee_open_session There is a potential race conditio… |
CVE-2023-53046 | High | 7.8 | 2025-05-02 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hci_cmd_sync_clear There is a potential race condition i… |
CVE-2022-49920 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: netlink notifier might race to release objects commit release path… |
CVE-2022-49919 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flow rule object from commit path No need to postpone this… |
CVE-2022-49884 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: Initialize gfn_to_pfn_cache locks in dedicated helper Move the gfn_to_pfn_cache lock… |
CVE-2022-49814 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: kcm: close race conditions on sk_receive_queue sk->sk_receive_queue is protected by skb q… |
CVE-2022-49798 | Medium | 4.7 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race where eprobes can be called before the event The flag that tells the ev… |
CVE-2022-49781 | Medium | 4.7 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling a… |
CVE-2022-49771 | Medium | 4.7 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: dm ioctl: fix misbehavior if list_versions races with module loading __list_versions will… |
CVE-2025-23151 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client driver may use mhi_unpr… |
CVE-2025-3886 | High | 8.1 | 2025-04-27 | An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool c… |
CVE-2025-46613 | High | 7.5 | 2025-04-25 | OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack frame becomes unavail… |
CVE-2025-37088 | Medium | 6.8 | 2025-04-22 | A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on race conditions and configuration, this vulnerability… |
CVE-2025-32793 | Medium | 4.0 | 2025-04-21 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2… |
CVE-2025-38104 | Medium | 4.7 | 2025-04-18 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversi… |
CVE-2025-22115 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() Block group c… |
CVE-2025-22100 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race condition when gathering fdinfo group samples Commit e16635d88fa0 (… |
CVE-2025-22036 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer… |
CVE-2025-22027 | Medium | 4.7 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkaller has re… |
CVE-2024-58248 | Low | 3.5 | 2025-04-16 | nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards. |
CVE-2025-3608 | Medium | 6.5 | 2025-04-15 | A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This… |
CVE-2025-27492 | High | 7.0 | 2025-04-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate… |
CVE-2025-26649 | High | 7.0 | 2025-04-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate… |
CVE-2025-21984 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: mm: fix kernel BUG when userfaultfd_move encounters swapcache userfaultfd_move() checks w… |
CVE-2025-21947 | High | 8.1 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix type confusion via race condition when using ipc_msg_send_request req->handle… |
CVE-2025-21943 | Medium | 4.7 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_stor… |
CVE-2025-21938 | High | 7.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr If multiple con… |
CVE-2025-21909 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject cooked mode if it is set along with other flags It is possible to s… |
CVE-2025-21895 | Medium | 4.7 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list Syskaller trigg… |
CVE-2025-31188 | High | 7.8 | 2025-03-31 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be… |
CVE-2025-30444 | Critical | 9.8 | 2025-03-31 | A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. Mounting a maliciou… |
CVE-2025-24240 | Medium | 4.7 | 2025-03-31 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be… |
CVE-2023-53020 | Medium | 4.7 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: l2tp: close all race conditions in l2tp_tunnel_register() The code in l2tp_tunnel_registe… |
CVE-2023-52934 | High | 7.8 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups In commit 34488399fa08 ("mm/madvise… |
CVE-2025-21892 | Medium | 4.7 | 2025-03-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix the recovery flow of the UMR QP This patch addresses an issue in the recov… |
CVE-2025-24808 | Medium | 4.3 | 2025-03-26 | Discourse is an open-source discussion platform. Prior to versions `3.3.4` on the `stable` branch and `3.4.0.beta5` on the `beta` branch, someone who is about… |
CVE-2024-7598 | Low | 3.1 | 2025-03-20 | A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namesp… |
CVE-2025-30235 | Low | 3.5 | 2025-03-19 | Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead a… |
CVE-2024-58048 | Medium | 6.7 | 2025-03-04 | Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-58045 | High | 8.6 | 2025-03-04 | Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-1801 | High | 8.1 | 2025-03-03 | A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition req… |
CVE-2022-49733 | High | 7.8 | 2025-03-02 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC There is a small race window at snd_pcm_oss_s… |
CVE-2025-21732 | Medium | 4.7 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error This patch addresses a… |
CVE-2025-21718 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: rose: fix timer races against user threads Rose timers only acquire the socket spinl… |
CVE-2024-57974 | Medium | 4.7 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: udp: Deal with race between UDP socket address change and rehash If a UDP socket changes… |
CVE-2025-20119 | Medium | 6.0 | 2025-02-26 | A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which cou… |
CVE-2022-49655 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: fscache: Fix invalidation/lookup race If an NFS file is opened for writing and closed, fs… |
CVE-2022-49641 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data races in proc_douintvec(). A sysctl variable is accessed concurrently, a… |
CVE-2022-49640 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data races in proc_douintvec_minmax(). A sysctl variable is accessed concurre… |
CVE-2022-49639 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cipso: Fix data-races around sysctl. While reading cipso sysctl variables, they can be ch… |
CVE-2022-49638 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. While reading icmp sysctl variables, they can be chan… |
CVE-2022-49637 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctl_fib_sync_mem. While reading sysctl_fib_sync_mem, it c… |
CVE-2022-49634 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data-races in proc_dou8vec_minmax(). A sysctl variable is accessed concurrent… |
CVE-2022-49633 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl_icmp_echo_enable_probe. While reading sysctl_icmp_echo… |
CVE-2022-49632 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. While reading sysctl_… |
CVE-2022-49631 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: raw: Fix a data-race around sysctl_raw_l3mdev_accept. While reading sysctl_raw_l3mdev_acc… |
CVE-2022-49630 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_ecn_fallback. While reading sysctl_tcp_ecn_fallbac… |
CVE-2022-49629 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix data-races around nexthop_compat_mode. While reading nexthop_compat_mode, it… |
CVE-2022-49607 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() Yang Jihin… |
CVE-2022-49604 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_use_pmtu. While reading sysctl_ip_fwd_use_pmtu, i… |
CVE-2022-49603 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_update_priority. While reading sysctl_ip_fwd_upda… |
CVE-2022-49602 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_fwmark_reflect. While reading sysctl_fwmark_reflect, it… |
CVE-2022-49601 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. While reading sysctl_tcp_fwmar… |
CVE-2022-49600 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_ip_autobind_reuse. While reading sysctl_ip_autobind_reu… |
CVE-2022-49599 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_l3mdev_accept. While reading sysctl_tcp_l3mdev_acce… |
CVE-2022-49598 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_mtu_probing. While reading sysctl_tcp_mtu_probing… |
CVE-2022-49597 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_base_mss. While reading sysctl_tcp_base_mss, it can… |
CVE-2022-49596 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_min_snd_mss. While reading sysctl_tcp_min_snd_mss… |
CVE-2022-49595 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_threshold. While reading sysctl_tcp_probe_th… |
CVE-2022-49594 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. While reading sysctl_tcp_mtu_prob… |
CVE-2022-49593 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_interval. While reading sysctl_tcp_probe_int… |
CVE-2022-49590 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_llm_reports. While reading sysctl_igmp_llm_report… |
CVE-2022-49589 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_qrv. While reading sysctl_igmp_qrv, it can be cha… |
CVE-2022-49588 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_migrate_req. While reading sysctl_tcp_migrate_req… |
CVE-2022-49587 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_notsent_lowat. While reading sysctl_tcp_notsent_lo… |
CVE-2022-49586 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen. While reading sysctl_tcp_fastopen, it can… |
CVE-2022-49585 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. While reading sysctl_tc… |
CVE-2022-49580 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. While reading sysctl_fib_mul… |
CVE-2022-49579 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. While reading sysctl_fib_mu… |
CVE-2022-49578 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_prot_sock. sysctl_ip_prot_sock is accessed concurrent… |
CVE-2022-49577 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: udp: Fix a data-race around sysctl_udp_l3mdev_accept. While reading sysctl_udp_l3mdev_acc… |
CVE-2022-49576 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. While reading sysctl_fib_mu… |
CVE-2022-49575 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. While reading sysctl_tcp_thi… |