CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Description
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-26 · CAPEC-29
CVEs mapped to this weakness (2,597)
page 12 of 130| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-36463 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of Send for InnerSend<RW, T>, InnerRecv<RW, T>, FutInnerSend<RW, T>, and FutInnerRecv<RW, T>. | ||
| CVE-2020-36461 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the noise_search crate through 2020-12-10 for Rust. There are unconditional implementations of Send and Sync for MvccRwLock. | ||
| CVE-2020-36460 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type. | ||
| CVE-2020-36459 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore. | ||
| CVE-2020-36458 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult<T, E>, there is an implementation of Sync with a trait bound of T: Send, E: Send. | ||
| CVE-2020-36456 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell, the Send trait lacks bounds on the contained type. | ||
| CVE-2020-36453 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue. | ||
| CVE-2020-36450 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch. | ||
| CVE-2020-36448 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the cache crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for Cache. | ||
| CVE-2020-36446 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the signal-simple crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for SyncChannel. | ||
| CVE-2020-36445 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for ConVec. | ||
| CVE-2020-36444 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard<RC, T> without trait bounds on RC. | ||
| CVE-2020-36442 | Hig | 0.53 | 8.1 | 0.01 | Aug 8, 2021 | An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait. | ||
| CVE-2021-22428 | Hig | 0.53 | 8.1 | 0.01 | Aug 2, 2021 | There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. | ||
| CVE-2021-22427 | Hig | 0.53 | 8.1 | 0.01 | Aug 2, 2021 | There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. | ||
| CVE-2021-22384 | Hig | 0.53 | 8.1 | 0.01 | Aug 2, 2021 | There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass. | ||
| CVE-2021-0514 | Hig | 0.53 | 8.1 | 0.01 | Jul 14, 2021 | In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:… | ||
| CVE-2021-24377 | Hig | 0.53 | 8.1 | 0.01 | Jun 21, 2021 | The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Import Settings' feature, however this is not sufficient to protect against RCE as a race condition can be achieved in between the moment the… | ||
| CVE-2020-14104 | Hig | 0.53 | 8.1 | 0.01 | Apr 8, 2021 | A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50. | ||
| CVE-2018-20316 | Hig | 0.53 | 8.1 | 0.01 | Jan 7, 2021 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode. |
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of Send for InnerSend<RW, T>, InnerRecv<RW, T>, FutInnerSend<RW, T>, and FutInnerRecv<RW, T>.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the noise_search crate through 2020-12-10 for Rust. There are unconditional implementations of Send and Sync for MvccRwLock.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult<T, E>, there is an implementation of Sync with a trait bound of T: Send, E: Send.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell, the Send trait lacks bounds on the contained type.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the cache crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for Cache.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the signal-simple crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for SyncChannel.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for ConVec.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard<RC, T> without trait bounds on RC.
- risk 0.53cvss 8.1epss 0.01
An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait.
- risk 0.53cvss 8.1epss 0.01
There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.
- risk 0.53cvss 8.1epss 0.01
There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.
- risk 0.53cvss 8.1epss 0.01
There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.
- risk 0.53cvss 8.1epss 0.01
In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…
- risk 0.53cvss 8.1epss 0.01
The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Import Settings' feature, however this is not sufficient to protect against RCE as a race condition can be achieved in between the moment the…
- risk 0.53cvss 8.1epss 0.01
A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.
- risk 0.53cvss 8.1epss 0.01
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode.