CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition (page 5)
Page 5 of 8 — CVEs classified under CWE-367, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-35265 | High | 7.0 | 2024-06-11 | Windows Perception Service Elevation of Privilege Vulnerability |
CVE-2024-30099 | High | 7.0 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30088 | High | 7.0 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30084 | High | 7.0 | 2024-06-11 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-36304 | High | 7.8 | 2024-06-10 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on af… |
CVE-2021-3899 | High | 7.8 | 2024-06-03 | There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as roo… |
CVE-2021-47280 | High | 7.0 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free read in drm_getunique() There is a time-of-check-to-time-of-use e… |
CVE-2024-3292 | High | 8.2 | 2024-05-17 | A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installatio… |
CVE-2024-3290 | High | 8.2 | 2024-05-17 | A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters at installation time… |
CVE-2024-21792 | Medium | 4.7 | 2024-05-16 | Time-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable info… |
CVE-2024-28137 | High | 7.8 | 2024-05-14 | A local attacker with low privileges can perform a privilege escalation with an init script due… |
CVE-2024-29149 | High | 7.4 | 2024-05-07 | An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because o… |
CVE-2024-2913 | Medium | 6.5 | 2024-05-07 | A race condition vulnerability exists in the mintplex-labs/anything-llm repository, specifically within the user invite acceptance process. Attackers can explo… |
CVE-2023-33119 | High | 8.4 | 2024-05-06 | Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache. |
CVE-2024-34528 | High | 7.7 | 2024-05-06 | WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creatio… |
CVE-2023-32156 | High | 8.8 | 2024-05-03 | Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on aff… |
CVE-2023-27327 | High | 7.5 | 2024-05-03 | Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2023-27323 | High | 7.8 | 2024-05-03 | Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2024-26974 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's erro… |
CVE-2024-23463 | High | 8.8 | 2024-04-30 | Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repair App functionality. This affects Zsca… |
CVE-2022-48682 | Medium | 6.0 | 2024-04-26 | In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. |
CVE-2024-32482 | Low | 2.2 | 2024-04-23 | The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’… |
CVE-2024-2440 | Medium | 5.5 | 2024-04-19 | A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on a detached repository by making a GraphQL mutation to alter r… |
CVE-2024-24995 | High | 7.5 | 2024-04-19 | A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… |
CVE-2024-24993 | High | 7.5 | 2024-04-19 | A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands… |
CVE-2024-28718 | Critical | 9.8 | 2024-04-12 | An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component. |
CVE-2024-29066 | High | 7.2 | 2024-04-09 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2024-29062 | High | 7.1 | 2024-04-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26218 | High | 7.8 | 2024-04-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-1729 | Medium | 5.9 | 2024-03-29 | A timing attack vulnerability exists in the gradio-app/gradio repository, specifically within the login function in routes.py. The vulnerability arises from th… |
CVE-2024-28183 | Medium | 6.1 | 2024-03-25 | ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS. A Time-of-Check to Time-of-Use (TOCTOU) vulnerability was discov… |
CVE-2021-33632 | High | 7.0 | 2024-03-25 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Cond… |
CVE-2023-32282 | High | 7.2 | 2024-03-14 | Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2024-24692 | Medium | 5.3 | 2024-03-13 | Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via loca… |
CVE-2024-0163 | Medium | 5.3 | 2024-03-13 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploi… |
CVE-2024-21433 | High | 7.0 | 2024-03-12 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2024-27297 | Medium | 6.3 | 2024-03-11 | Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another p… |
CVE-2023-52556 | Medium | 6.2 | 2024-03-01 | In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states may cause a kernel panic. |
CVE-2023-52478 | High | 8.8 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() ha… |
CVE-2023-6917 | Medium | 6.0 | 2024-02-28 | A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated… |
CVE-2024-1563 | High | 8.1 | 2024-02-22 | An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a… |
CVE-2022-23084 | High | 7.5 | 2024-02-15 | The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin. This time-of-check to time-of-use bug could… |
CVE-2024-21371 | High | 7.0 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21362 | Medium | 5.5 | 2024-02-13 | Windows Kernel Security Feature Bypass Vulnerability |
CVE-2023-33046 | High | 7.8 | 2024-02-06 | Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation. |
CVE-2022-48618 | High | 7.0 | 2024-01-09 | The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arb… |
CVE-2023-43741 | High | 7.0 | 2023-12-22 | A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to… |
CVE-2023-6803 | Medium | 5.8 | 2023-12-21 | A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected al… |
CVE-2023-6690 | Low | 3.9 | 2023-12-21 | A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alte… |
CVE-2023-46649 | Medium | 6.3 | 2023-12-21 | A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access. To exploit this, an organization needs to be con… |
CVE-2022-45809 | Medium | 5.3 | 2023-12-19 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0. |
CVE-2022-24351 | Medium | 4.7 | 2023-12-16 | TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before… |
CVE-2023-42483 | Medium | 6.3 | 2023-12-13 | A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos 1380 can cause unex… |
CVE-2023-37867 | Low | 3.7 | 2023-11-30 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue aff… |
CVE-2023-20521 | Low | 3.3 | 2023-11-14 | TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading t… |
CVE-2023-5760 | High | 8.2 | 2023-11-08 | A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds write vulnerability… |
CVE-2023-46725 | High | 8.1 | 2023-11-02 | FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vulnerable to server-side request forgery… |
CVE-2022-3702 | Medium | 6.1 | 2023-10-27 | A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local attacker to delete c… |
CVE-2022-3701 | High | 7.8 | 2023-10-27 | A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to… |
CVE-2022-3700 | Medium | 6.1 | 2023-10-27 | A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a loca… |
CVE-2023-38041 | High | 7.0 | 2023-10-25 | A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a particular process flow is initiated, an… |
CVE-2023-34046 | Medium | 6.7 | 2023-10-20 | VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during installation for the first time (the user ne… |
CVE-2023-44188 | Medium | 5.3 | 2023-10-11 | A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in telemetry processing of Juniper Networks Junos OS allows a network-based authenticated at… |
CVE-2023-43976 | High | 8.1 | 2023-10-03 | An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool… |
CVE-2023-44128 | Medium | 5.0 | 2023-09-27 | he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the exported "com.lge.lginstallservies.Ins… |
CVE-2023-3891 | High | 7.3 | 2023-09-15 | Race condition in Lapce v0.2.8 allows an attacker to elevate privileges on the system |
CVE-2022-47631 | High | 7.8 | 2023-09-14 | Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. Attackers can place DLL… |
CVE-2023-4155 | Medium | 5.3 | 2023-09-13 | A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a do… |
CVE-2023-20135 | Medium | 5.7 | 2023-09-13 | A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying ope… |
CVE-2023-38146 | High | 8.8 | 2023-09-12 | Windows Themes Remote Code Execution Vulnerability |
CVE-2023-38141 | High | 7.8 | 2023-09-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-27470 | High | 7.0 | 2023-09-11 | BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSuppor… |
CVE-2023-37250 | High | 7.0 | 2023-08-20 | Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The applicat… |
CVE-2023-28075 | Medium | 6.9 | 2023-08-16 | Dell BIOS contain a Time-of-check Time-of-use vulnerability in BIOS. A local authenticated malicious user with physical access to the system could potentially… |
CVE-2023-35378 | High | 7.0 | 2023-08-08 | Windows Projected File System Elevation of Privilege Vulnerability |
CVE-2023-28576 | Medium | 6.4 | 2023-08-08 | The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode ma… |
CVE-2023-20788 | Medium | 6.4 | 2023-08-07 | In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20787 | Medium | 6.4 | 2023-08-07 | In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20785 | Medium | 6.4 | 2023-08-07 | In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-26438 | Medium | 4.3 | 2023-08-02 | External service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS cache. Attackers tha… |
CVE-2023-33832 | Medium | 6.2 | 2023-07-19 | IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functio… |
CVE-2023-35311 | High | 8.8 | 2023-07-11 | Microsoft Outlook Security Feature Bypass Vulnerability |
CVE-2023-33156 | Medium | 6.3 | 2023-07-11 | Microsoft Defender Elevation of Privilege Vulnerability |
CVE-2023-33154 | High | 7.8 | 2023-07-11 | Windows Partition Management Driver Elevation of Privilege Vulnerability |
CVE-2023-26299 | High | 7.0 | 2023-06-30 | A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which migh… |
CVE-2022-4143 | Medium | 6.4 | 2023-06-28 | An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that all… |
CVE-2023-1295 | High | 7.8 | 2023-06-28 | A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inclusive), which allo… |
CVE-2023-32555 | High | 7.0 | 2023-06-26 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on af… |
CVE-2023-32554 | High | 7.0 | 2023-06-26 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on af… |
CVE-2022-4149 | High | 7.0 | 2023-06-15 | The Netskope client service (prior to R96) on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable directory (C:\Users\Public\netSkope) for… |
CVE-2022-31642 | High | 7.0 | 2023-06-14 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privileg… |
CVE-2022-31641 | High | 7.0 | 2023-06-14 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privileg… |
CVE-2022-31640 | High | 7.0 | 2023-06-14 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privileg… |
CVE-2023-29337 | High | 7.1 | 2023-06-14 | NuGet Client Remote Code Execution Vulnerability |
CVE-2022-31639 | High | 7.8 | 2023-06-13 | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code e… |
CVE-2022-31638 | High | 7.8 | 2023-06-13 | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code e… |
CVE-2022-31637 | High | 7.8 | 2023-06-13 | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code e… |
CVE-2022-31636 | High | 7.8 | 2023-06-13 | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code e… |
CVE-2022-31635 | High | 7.8 | 2023-06-13 | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code e… |
CVE-2022-43778 | High | 7.8 | 2023-06-12 | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code e… |