CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 8)
Page 8 of 28 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-55687 | High | 7.4 | 2025-10-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized atta… |
CVE-2025-55335 | High | 7.4 | 2025-10-14 | Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-55328 | High | 7.8 | 2025-10-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privile… |
CVE-2025-53768 | High | 7.8 | 2025-10-14 | Use after free in Xbox allows an authorized attacker to elevate privileges locally. |
CVE-2025-53150 | High | 7.8 | 2025-10-14 | Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. |
CVE-2025-54973 | Medium | 5.3 | 2025-10-14 | A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in Fortinet FortiAnalyzer version 7.6.0 t… |
CVE-2025-39964 | High | 7.8 | 2025-10-13 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the s… |
CVE-2025-11637 | Medium | 4.3 | 2025-10-12 | A vulnerability was detected in Tomofun Furbo 360 up to FB0035_FW_036. Impacted is an unknown function of the component Audio Handler. Performing manipulation… |
CVE-2025-39961 | High | 8.8 | 2025-10-09 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase page table level The AMD IOMMU host pag… |
CVE-2023-53623 | Medium | 4.7 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() The si->lock must… |
CVE-2023-53622 | High | 7.0 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options() Some fields such as gt_logd_secs of… |
CVE-2023-53615 | High | 8.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix deletion race condition System crash when using debug kernel due to li… |
CVE-2023-53614 | Medium | 4.7 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix race with VMA iteration and mm_struct teardown exit_mmap() will tear down the… |
CVE-2023-53581 | Medium | 4.7 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOT_READY flag state after locking Currently the check for NOT_READY… |
CVE-2025-39941 | High | 7.8 | 2025-10-04 | In the Linux kernel, the following vulnerability has been resolved: zram: fix slot write race condition Parallel concurrent writes to the same zram index res… |
CVE-2023-53520 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unregister_dev() frees the hci_dev object bu… |
CVE-2023-53490 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix disconnect vs accept race Despite commit 0ad529d9fd2b ("mptcp: fix possible di… |
CVE-2023-53478 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: tracing/synthetic: Fix races on freeing last_cmd Currently, the "last_cmd" variable can b… |
CVE-2023-53452 | Medium | 4.7 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential race condition between napi_init and napi_enable A race condit… |
CVE-2025-39927 | High | 7.8 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating r_parent before applying state Add validation to ensu… |
CVE-2025-39905 | High | 7.0 | 2025-10-01 | In the Linux kernel, the following vulnerability has been resolved: net: phylink: add lock for serializing concurrent pl->phydev writes with resolver Current… |
CVE-2025-61792 | Medium | 6.4 | 2025-09-30 | Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, the Help Button, th… |
CVE-2025-55191 | Medium | 6.5 | 2025-09-30 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1, 3.1.0-rc1 through 3.1.7, and 3.0.0-rc1… |
CVE-2025-59577 | Medium | 4.3 | 2025-09-22 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-… |
CVE-2025-10778 | Low | 3.1 | 2025-09-22 | A vulnerability has been found in Smartstore up to 6.2.0. The affected element is an unknown function of the file /checkout/confirm/ of the component Gift Vouc… |
CVE-2025-59220 | High | 7.0 | 2025-09-18 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to eleva… |
CVE-2025-59216 | High | 7.0 | 2025-09-18 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el… |
CVE-2023-53447 | Medium | 4.7 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: f2fs: don't reset unchangable mount option in f2fs_remount() syzbot reports a bug as belo… |
CVE-2022-50379 | Medium | 4.7 | 2025-09-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between quota enable and quota rescan ioctl When enabling quotas, at btrf… |
CVE-2023-53368 | Medium | 4.7 | 2025-09-17 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race issue between cpu buffer write and swap Warning happened in rb_end_comm… |
CVE-2023-53345 | Medium | 4.7 | 2025-09-17 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential data race in rxrpc_wait_to_be_connected() Inside the loop in rxrpc_w… |
CVE-2022-50373 | Critical | 9.8 | 2025-09-17 | In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix race in lowcomms This patch fixes a race between queue_work() in _dlm_lowcom… |
CVE-2025-59455 | Medium | 4.2 | 2025-09-17 | In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition |
CVE-2023-53329 | Medium | 4.7 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: workqueue: fix data race with the pwq->stats[] increment KCSAN has discovered a data race… |
CVE-2023-53310 | Medium | 4.7 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: power: supply: axp288_fuel_gauge: Fix external_power_changed race fuel_gauge_external_pow… |
CVE-2022-50350 | Critical | 9.8 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between login_work and the login thread In case… |
CVE-2022-50339 | High | 7.8 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev() syzbot is again reportin… |
CVE-2025-39825 | High | 7.8 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename reque… |
CVE-2025-39813 | Medium | 4.7 | 2025-09-16 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_… |
CVE-2025-43304 | High | 7.0 | 2025-09-15 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able t… |
CVE-2025-43292 | Medium | 5.5 | 2025-09-15 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7, macOS Sequoia 15.7.2, macOS Tahoe 26. An app may be abl… |
CVE-2023-53204 | Medium | 4.7 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data-races around user->unix_inflight. user->unix_inflight is changed under… |
CVE-2023-53188 | Medium | 4.7 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix race on port output assume the following setup on a single machine… |
CVE-2023-53186 | High | 8.1 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: skbuff: Fix a race between coalescing and releasing SKBs Commit 1effe8ca4e34 ("skbuff: fi… |
CVE-2023-53178 | High | 7.8 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race con… |
CVE-2023-53166 | Medium | 4.7 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix external_power_changed race bq25890_charger_external_power_ch… |
CVE-2022-50259 | High | 7.8 | 2025-09-15 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix race in sock_map_free() sock_map_free() calls release_sock(sk) without… |
CVE-2025-39759 | High | 7.0 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl There's a race betwe… |
CVE-2025-39754 | Medium | 4.7 | 2025-09-11 | In the Linux kernel, the following vulnerability has been resolved: mm/smaps: fix race between smaps_hugetlb_range and migration smaps_hugetlb_range() handle… |
CVE-2025-58145 | High | 7.5 | 2025-09-11 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related… |
CVE-2025-59052 | | 2025-09-10 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container… | |
CVE-2025-10216 | Low | 2.6 | 2025-09-10 | A vulnerability was detected in GrandNode up to 2.3.0. The impacted element is an unknown function of the file /checkout/ConfirmOrder/ of the component Voucher… |
CVE-2025-55228 | High | 7.8 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute c… |
CVE-2025-55226 | Medium | 6.7 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to execute code lo… |
CVE-2025-55224 | High | 7.8 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute c… |
CVE-2025-55223 | High | 7.0 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile… |
CVE-2025-54919 | High | 7.5 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute c… |
CVE-2025-54913 | High | 7.8 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized att… |
CVE-2025-54115 | High | 7.0 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privile… |
CVE-2025-54114 | High | 7.0 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized… |
CVE-2025-54108 | High | 7.0 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2025-54105 | High | 7.0 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to… |
CVE-2025-54092 | High | 7.8 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privile… |
CVE-2025-53807 | High | 7.0 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el… |
CVE-2025-47997 | Medium | 6.5 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information… |
CVE-2025-39726 | Critical | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: s390/ism: fix concurrency management in ism_cmd() The s390x ISM device data sheet clearly… |
CVE-2025-39697 | High | 7.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests… |
CVE-2025-39673 | Critical | 9.8 | 2025-09-05 | In the Linux kernel, the following vulnerability has been resolved: ppp: fix race conditions in ppp_fill_forward_path ppp_fill_forward_path() has two race co… |
CVE-2025-58313 | Medium | 5.1 | 2025-09-05 | Race condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cause feature exceptions of the device sta… |
CVE-2025-58296 | High | 7.5 | 2025-09-05 | Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability. |
CVE-2025-48548 | High | 7.3 | 2025-09-04 | In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to a race condition. T… |
CVE-2025-48533 | High | 7.0 | 2025-09-04 | In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local esc… |
CVE-2025-38717 | High | 7.8 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcm_unattach() syzbot found a race condition when kcm_una… |
CVE-2025-38687 | High | 7.3 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-after-free in comedi… |
CVE-2025-38681 | Medium | 4.7 | 2025-09-04 | In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() Memory hot remove unmaps… |
CVE-2025-23259 | Medium | 6.5 | 2025-09-04 | NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure… |
CVE-2025-22442 | High | 7.0 | 2025-09-02 | In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to… |
CVE-2025-38675 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: xfrm: state: initialize state_ptrs earlier in xfrm_state_find In case of preemption, xfrm… |
CVE-2025-38632 | Medium | 4.7 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: pinmux: fix race causing mux_owner NULL with active mux_usecount commit 5a3e85c3c397 ("pi… |
CVE-2025-38617 | High | 7.8 | 2025-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring()… |
CVE-2025-55231 | High | 7.5 | 2025-08-21 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to execute code… |
CVE-2025-38567 | Medium | 4.7 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid ref leak in nfsd_open_local_fh() If two calls to nfsd_open_local_fh() race an… |
CVE-2025-38561 | Critical | 9.8 | 2025-08-19 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests… |
CVE-2025-38524 | High | 7.5 | 2025-08-16 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recv-recv race of completed call If a call receives an event (such as incoming… |
CVE-2025-8880 | High | 8.8 | 2025-08-13 | Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium sec… |
CVE-2025-49456 | Medium | 6.2 | 2025-08-12 | Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access. |
CVE-2025-53135 | High | 7.0 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privile… |
CVE-2025-53132 | High | 7.8 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p… |
CVE-2025-50177 | High | 8.1 | 2025-08-12 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
CVE-2025-50169 | High | 7.5 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an unauthorized attacker to execute code over… |
CVE-2025-50167 | High | 7.0 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privile… |
CVE-2025-49762 | High | 7.0 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
CVE-2025-49743 | Medium | 6.7 | 2025-08-12 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el… |
CVE-2025-22830 | Medium | 6.7 | 2025-08-12 | APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may le… |
CVE-2025-27577 | High | 8.4 | 2025-08-11 | in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition. |
CVE-2025-25278 | High | 8.4 | 2025-08-11 | in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition. |
CVE-2025-47907 | High | 7.0 | 2025-08-07 | Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unex… |
CVE-2025-7954 | High | 8.1 | 2025-08-06 | A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrict… |
CVE-2025-54651 | Medium | 4.8 | 2025-08-06 | Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54629 | Medium | 6.7 | 2025-08-06 | Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may a… |