CWE-366 · Race Condition within a Thread

14 CVEs classified under CWE-366 (Race Condition within a Thread). Browse by severity and year.

Top CVEs for CWE-366
CVESeverityScorePublishedSummary
CVE-2021-26569Critical9.82021-03-12Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to…
CVE-2024-10630High7.82025-01-14A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functio…
CVE-2023-6546High7.02023-12-21A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same…
CVE-2023-4127Medium6.52023-08-03Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.
CVE-2023-3218Medium6.52023-06-13Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5.
CVE-2026-23684Medium5.92026-02-10A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being…
CVE-2026-22819Medium5.92026-01-14Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack…
CVE-2020-1629Medium5.92020-04-08A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process to crash and restart while processing a…
CVE-2023-4732Medium4.72023-10-03A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause…
CVE-2015-10067Medium4.62023-01-18A vulnerability was found in oznetmaster SSharpSmartThreadPool. It has been classified as problematic. This affects an unknown part of the file SSharpSmartThre…
CVE-2024-2032Low3.12024-06-06A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for the creation of multiple users with the same user…
CVE-2026-39042026-03-11Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64…
CVE-2025-311152025-04-03XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma…
CVE-2022-17292022-09-01A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to buil…