CWE-364 · Signal Handler Race Condition

12 CVEs classified under CWE-364 (Signal Handler Race Condition). Browse by severity and year.

Top CVEs for CWE-364
CVESeverityScorePublishedSummary
CVE-2026-24792High8.12026-05-19in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
CVE-2024-6387High8.12024-07-01A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an uns…
CVE-2023-1285High7.52023-04-14Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a r…
CVE-2024-6409High7.02024-07-08A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not authenticate within a set ti…
CVE-2025-53092Medium6.52025-10-16Strapi is an open source headless content management system. Strapi versions prior to 5.20.0 contain a CORS misconfiguration vulnerability in default installat…
CVE-2026-42002Medium5.92026-05-21Concurrency and locking defects in GSS-TSIG
CVE-2026-27766Medium5.52026-05-19in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.
CVE-2019-3805Medium5.52019-05-03A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processe…
CVE-2025-4598Medium4.72025-05-30A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access th…
CVE-2023-5676Medium4.12023-11-15In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM…
CVE-2026-33565Low3.32026-05-19in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
CVE-2020-143172021-06-02It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery…