CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Description
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-26 · CAPEC-29
CVEs mapped to this weakness (2,597)
page 24 of 130| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-46925 | Hig | 0.51 | 7.8 | 0.00 | Feb 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_sock A crash occurs when smc_cdc_tx_handler() tries to access smc_sock but smc_release() has already freed it. [ 4570.695099] BUG: unable to handle page fault… | ||
| CVE-2023-33110 | Hig | 0.51 | 7.8 | 0.00 | Jan 2, 2024 | The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption. | ||
| CVE-2023-35362 | Hig | 0.51 | 7.8 | 0.00 | Jul 11, 2023 | Windows Clip Service Elevation of Privilege Vulnerability | ||
| CVE-2022-31645 | Hig | 0.51 | 7.8 | 0.00 | Jun 14, 2023 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. | ||
| CVE-2022-41100 | Hig | 0.51 | 7.8 | 0.00 | Nov 9, 2022 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | ||
| CVE-2022-41093 | Hig | 0.51 | 7.8 | 0.00 | Nov 9, 2022 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | ||
| CVE-2022-41045 | Hig | 0.51 | 7.8 | 0.00 | Nov 9, 2022 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | ||
| CVE-2022-34696 | Hig | 0.51 | 7.8 | 0.00 | Aug 9, 2022 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2022-34892 | Hig | 0.51 | 7.8 | 0.00 | Jul 18, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The… | ||
| CVE-2021-3922 | Hig | 0.51 | 7.8 | 0.02 | May 18, 2022 | A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and interact with the IMController child process' named pipe. | ||
| CVE-2022-29113 | Hig | 0.51 | 7.8 | 0.00 | May 10, 2022 | Windows Digital Media Receiver Elevation of Privilege Vulnerability | ||
| CVE-2022-24537 | Hig | 0.51 | 7.8 | 0.00 | Apr 15, 2022 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2022-22008 | Hig | 0.51 | 7.8 | 0.00 | Apr 15, 2022 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2022-24986 | Hig | 0.51 | 7.8 | 0.00 | Feb 26, 2022 | KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands. | ||
| CVE-2021-44731 | Hig | 0.51 | 7.8 | 0.01 | Feb 17, 2022 | A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine… | ||
| CVE-2021-0652 | Hig | 0.51 | 7.8 | 0.00 | Oct 22, 2021 | In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not… | ||
| CVE-2021-0483 | Hig | 0.51 | 7.8 | 0.00 | Oct 22, 2021 | In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10… | ||
| CVE-2021-28701 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2021 | Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, are de-allocated when a guest… | ||
| CVE-2021-28697 | Hig | 0.51 | 7.8 | 0.00 | Aug 27, 2021 | grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get… | ||
| CVE-2021-21117 | Hig | 0.51 | 7.8 | 0.00 | Feb 9, 2021 | Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file. |
- risk 0.51cvss 7.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_sock A crash occurs when smc_cdc_tx_handler() tries to access smc_sock but smc_release() has already freed it. [ 4570.695099] BUG: unable to handle page fault…
- risk 0.51cvss 7.8epss 0.00
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
- risk 0.51cvss 7.8epss 0.00
Windows Clip Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
- risk 0.51cvss 7.8epss 0.00
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The…
- risk 0.51cvss 7.8epss 0.02
A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and interact with the IMController child process' named pipe.
- risk 0.51cvss 7.8epss 0.00
Windows Digital Media Receiver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands.
- risk 0.51cvss 7.8epss 0.01
A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and causing snap-confine…
- risk 0.51cvss 7.8epss 0.00
In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…
- risk 0.51cvss 7.8epss 0.00
In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10…
- risk 0.51cvss 7.8epss 0.00
Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, are de-allocated when a guest…
- risk 0.51cvss 7.8epss 0.00
grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get…
- risk 0.51cvss 7.8epss 0.00
Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file.