CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) (page 9)
Page 9 of 26 — CVEs classified under CWE-362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-49574 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_recovery. While reading sysctl_tcp_recovery, it can… |
CVE-2022-49573 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_early_retrans. While reading sysctl_tcp_early_retr… |
CVE-2022-49572 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. While reading sysctl_tcp_slo… |
CVE-2022-49571 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_max_reordering. While reading sysctl_tcp_max_reorde… |
CVE-2022-49554 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: zsmalloc: fix races between asynchronous zspage free and page migration The asynchronous… |
CVE-2022-49540 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix race in schedule and flush work While booting secondary CPUs, cpus_read_[l… |
CVE-2022-49443 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: list: fix a data-race around ep->rdllist ep_poll() first calls ep_events_available() with… |
CVE-2022-49414 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix race condition between ext4_write and ext4_convert_inline_data Hulk Robot repor… |
CVE-2022-49344 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix a data-race in unix_dgram_peer_wake_me(). unix_dgram_poll() calls unix_dgram… |
CVE-2022-49300 | Medium | 4.7 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between nbd_alloc_config() and module removal When nbd module is being remo… |
CVE-2022-49215 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race at socket teardown Fix a race in the xsk socket teardown code that can lead… |
CVE-2022-49201 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: fix race between xmit and reset There is a race between reset and the transmit p… |
CVE-2022-49149 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call timer start racing with call destruction The rxrpc_call struct has a time… |
CVE-2022-49089 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition The documentation… |
CVE-2024-51505 | High | 8.0 | 2025-02-18 | An issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role (Config Admin) could leverage a race condition to escalate privileges. |
CVE-2025-1127 | Critical | 9.1 | 2025-02-13 | The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem. |
CVE-2025-21701 | High | 7.8 | 2025-02-13 | In the Linux kernel, the following vulnerability has been resolved: net: avoid race between device unregistration and ethnl ops The following trace can be se… |
CVE-2024-40887 | Medium | 6.1 | 2025-02-12 | Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentia… |
CVE-2024-36285 | Medium | 5.6 | 2025-02-12 | Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentiall… |
CVE-2024-36262 | High | 7.2 | 2025-02-12 | Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of pr… |
CVE-2023-49603 | High | 7.5 | 2025-02-12 | Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of pr… |
CVE-2023-48366 | Medium | 5.3 | 2025-02-12 | Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable information disc… |
CVE-2025-21376 | High | 8.1 | 2025-02-11 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2025-21688 | Medium | 4.7 | 2025-02-10 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Assign job pointer to NULL before signaling the fence In commit e4b5ccd392b9 ("d… |
CVE-2025-1013 | Medium | 6.5 | 2025-02-04 | A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vu… |
CVE-2024-34732 | High | 8.4 | 2025-01-28 | In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in… |
CVE-2025-24094 | Medium | 4.7 | 2025-01-27 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be… |
CVE-2024-57913 | Medium | 4.7 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Remove WARN_ON in functionfs_bind This commit addresses an issue relat… |
CVE-2025-21651 | Medium | 4.7 | 2025-01-19 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: don't auto enable misc vector Currently, there is a time window between misc i… |
CVE-2018-9461 | High | 7.0 | 2025-01-18 | In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead… |
CVE-2024-57893 | High | 7.8 | 2025-01-15 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix races at processing SysEx messages OSS sequencer handles the SysEx me… |
CVE-2025-0439 | Medium | 6.5 | 2025-01-15 | Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing… |
CVE-2025-21101 | Medium | 6.6 | 2025-01-15 | Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability d… |
CVE-2025-21278 | Medium | 6.2 | 2025-01-14 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
CVE-2024-12747 | Medium | 5.6 | 2025-01-14 | A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encounterin… |
CVE-2024-57876 | High | 7.0 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix resetting msg rx state after topology removal If the MST topology is remo… |
CVE-2024-56788 | High | 7.5 | 2025-01-11 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oa_tc6: fix tx skb race condition between reference pointers There are two… |
CVE-2024-56441 | Medium | 4.1 | 2025-01-08 | Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-54120 | Medium | 4.1 | 2025-01-08 | Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause features to perform abnorma… |
CVE-2024-56706 | High | 7.8 | 2024-12-28 | In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU… |
CVE-2024-53476 | Medium | 5.9 | 2024-12-27 | A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to bypass inventory restrictions by simulta… |
CVE-2024-56664 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close() Element replace (with a socket… |
CVE-2024-56637 | High | 7.3 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Hold module reference while requesting a module User space may unload i… |
CVE-2024-56635 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: net: avoid potential UAF in default_operstate() syzbot reported an UAF in default_opersta… |
CVE-2024-56576 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix crash in the probe error path when using polling If an error oc… |
CVE-2024-56568 | Medium | 4.7 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Defer probe of clients after smmu device bound Null pointer dereference o… |
CVE-2024-56556 | High | 7.0 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: binder: fix node UAF in binder_add_freeze_work() In binder_add_freeze_work() we iterate o… |
CVE-2024-56552 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc_submit: fix race around suspend_pending Currently in some testcases we can tri… |
CVE-2024-56540 | High | 7.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and rec… |
CVE-2024-53186 | Critical | 9.8 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handling A race condition exists between SMB req… |
CVE-2024-52906 | Medium | 5.5 | 2024-12-25 | IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of s… |
CVE-2024-53160 | Medium | 4.7 | 2024-12-24 | In the Linux kernel, the following vulnerability has been resolved: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu KCSAN reports a data race when… |
CVE-2024-11144 | High | 7.5 | 2024-12-16 | The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become… |
CVE-2024-48872 | Medium | 4.8 | 2024-12-16 | Mattermost versions 10.1.x <= 10.1.2, 10.0.x <= 10.0.2, 9.11.x <= 9.11.4, and 9.5.x <= 9.5.12 fail to prevent concurrently checking and updating the failed log… |
CVE-2024-47892 | High | 7.8 | 2024-12-13 | Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. |
CVE-2024-46971 | High | 7.8 | 2024-12-13 | Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. |
CVE-2024-54122 | Medium | 6.2 | 2024-12-12 | Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-54102 | Medium | 6.1 | 2024-12-12 | Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-54510 | Medium | 5.1 | 2024-12-12 | A race condition was addressed with improved locking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2… |
CVE-2024-54494 | Medium | 5.9 | 2024-12-12 | A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14… |
CVE-2024-49132 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49129 | High | 7.5 | 2024-12-12 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
CVE-2024-49128 | High | 8.1 | 2024-12-12 | Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2024-49127 | High | 8.1 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2024-49126 | High | 8.1 | 2024-12-12 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability |
CVE-2024-49124 | High | 8.1 | 2024-12-12 | Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability |
CVE-2024-49123 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49122 | High | 8.1 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-49120 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49119 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49118 | High | 8.1 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-49116 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49115 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49108 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49106 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49097 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-49095 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-49084 | High | 7.0 | 2024-12-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-49059 | High | 7.0 | 2024-12-12 | Microsoft Office Elevation of Privilege Vulnerability |
CVE-2024-53136 | High | 7.5 | 2024-12-04 | In the Linux kernel, the following vulnerability has been resolved: mm: revert "mm: shmem: fix data-race in shmem_getattr()" Revert d949d1d14fa2 ("mm: shmem… |
CVE-2024-53124 | High | 7.5 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk->sk_forward_alloc Syzkaller reported this warning: -------… |
CVE-2024-53123 | Medium | 5.5 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: error out earlier on disconnect Eric reported a division by zero splat in the MPTC… |
CVE-2024-53122 | High | 7.5 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows… |
CVE-2024-53121 | High | 7.8 | 2024-12-02 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-st… |
CVE-2024-36615 | Medium | 5.9 | 2024-11-29 | FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side… |
CVE-2024-36623 | High | 8.1 | 2024-11-29 | moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations result… |
CVE-2024-36621 | Medium | 6.5 | 2024-11-29 | moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds t… |
CVE-2024-11708 | Medium | 6.5 | 2024-11-26 | Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 an… |
CVE-2024-49353 | High | 7.5 | 2024-11-26 | IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 4.0.0 through 5.0.2 does not properly check inputs to resources that are used concurrently, whi… |
CVE-2024-53100 | High | 7.8 | 2024-11-25 | In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp… |
CVE-2024-53088 | High | 7.8 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's intermediate sync state Fix a race condition… |
CVE-2024-48991 | High | 7.8 | 2024-11-19 | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needr… |
CVE-2024-48069 | Critical | 9.8 | 2024-11-19 | A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control server pr… |
CVE-2024-50297 | High | 7.5 | 2024-11-19 | In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts Enqueue packets i… |
CVE-2024-29211 | Medium | 4.7 | 2024-11-13 | A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuration files. |
CVE-2024-50313 | Medium | 5.3 | 2024-11-12 | A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mend… |
CVE-2024-50183 | Medium | 4.7 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance Deleting an… |
CVE-2024-50174 | High | 7.8 | 2024-11-08 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race when converting group handle to group object XArray provides it's o… |
CVE-2024-50135 | Medium | 4.7 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix race condition between reset and nvme_dev_disable() nvme_dev_disable() modi… |
CVE-2024-51515 | Medium | 6.2 | 2024-11-05 | Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability. |