CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Description
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-26 · CAPEC-29
CVEs mapped to this weakness (2,608)
page 89 of 131| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-46982 | Med | 0.31 | 4.7 | 0.00 | Feb 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix race condition of overwrite vs truncate pos_fsstress testcase complains a panic as belew: ------------[ cut here ]------------ kernel BUG at fs/f2fs/compress.c:1082! invalid opcode: 0000… | ||
| CVE-2023-45286 | Med | 0.31 | 5.9 | 0.01 | Nov 28, 2023 | A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same *bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then… | ||
| CVE-2023-20902 | Med | 0.31 | 5.9 | 0.00 | Nov 9, 2023 | A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below, Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to create jobs/stop job tasks and retrieve job task information. | ||
| CVE-2023-4732 | Med | 0.31 | 4.7 | 0.00 | Oct 3, 2023 | A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x. | ||
| CVE-2023-41979 | Med | 0.31 | 4.7 | 0.00 | Sep 27, 2023 | A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An app may be able to modify protected parts of the file system. | ||
| CVE-2023-21095 | Med | 0.31 | 4.7 | 0.00 | Jun 15, 2023 | In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for… | ||
| CVE-2023-2898 | Med | 0.31 | 4.7 | 0.00 | May 26, 2023 | There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem. | ||
| CVE-2023-27952 | Med | 0.31 | 4.7 | 0.00 | May 8, 2023 | A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks. | ||
| CVE-2023-1582 | Med | 0.31 | 4.7 | 0.00 | Apr 5, 2023 | A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service. | ||
| CVE-2023-21031 | Med | 0.31 | 4.7 | 0.00 | Mar 24, 2023 | In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:… | ||
| CVE-2022-46713 | Med | 0.31 | 4.7 | 0.00 | Feb 27, 2023 | A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system. | ||
| CVE-2022-47331 | Med | 0.31 | 4.7 | 0.00 | Feb 12, 2023 | In wlan driver, there is a race condition. This could lead to local denial of service in wlan services. | ||
| CVE-2023-21766 | Med | 0.31 | 4.7 | 0.01 | Jan 10, 2023 | Windows Overlay Filter Information Disclosure Vulnerability | ||
| CVE-2023-21536 | Med | 0.31 | 4.7 | 0.00 | Jan 10, 2023 | Event Tracing for Windows Information Disclosure Vulnerability | ||
| CVE-2022-42771 | Med | 0.31 | 4.7 | 0.00 | Dec 6, 2022 | In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. | ||
| CVE-2022-42770 | Med | 0.31 | 4.7 | 0.00 | Dec 6, 2022 | In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. | ||
| CVE-2022-39134 | Med | 0.31 | 4.7 | 0.00 | Dec 6, 2022 | In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel. | ||
| CVE-2022-32895 | Med | 0.31 | 4.7 | 0.01 | Nov 1, 2022 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system. | ||
| CVE-2022-0207 | Med | 0.31 | 4.7 | 0.00 | Aug 26, 2022 | A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text. | ||
| CVE-2022-30212 | Med | 0.31 | 4.7 | 0.00 | Jul 12, 2022 | Windows Connected Devices Platform Service Information Disclosure Vulnerability |
- risk 0.31cvss 4.7epss 0.00
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix race condition of overwrite vs truncate pos_fsstress testcase complains a panic as belew: ------------[ cut here ]------------ kernel BUG at fs/f2fs/compress.c:1082! invalid opcode: 0000…
- risk 0.31cvss 5.9epss 0.01
A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same *bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then…
- risk 0.31cvss 5.9epss 0.00
A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below, Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to create jobs/stop job tasks and retrieve job task information.
- risk 0.31cvss 4.7epss 0.00
A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.
- risk 0.31cvss 4.7epss 0.00
A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An app may be able to modify protected parts of the file system.
- risk 0.31cvss 4.7epss 0.00
In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
- risk 0.31cvss 4.7epss 0.00
There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.
- risk 0.31cvss 4.7epss 0.00
A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks.
- risk 0.31cvss 4.7epss 0.00
A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service.
- risk 0.31cvss 4.7epss 0.00
In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…
- risk 0.31cvss 4.7epss 0.00
A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system.
- risk 0.31cvss 4.7epss 0.00
In wlan driver, there is a race condition. This could lead to local denial of service in wlan services.
- risk 0.31cvss 4.7epss 0.01
Windows Overlay Filter Information Disclosure Vulnerability
- risk 0.31cvss 4.7epss 0.00
Event Tracing for Windows Information Disclosure Vulnerability
- risk 0.31cvss 4.7epss 0.00
In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
- risk 0.31cvss 4.7epss 0.00
In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
- risk 0.31cvss 4.7epss 0.00
In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.
- risk 0.31cvss 4.7epss 0.01
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system.
- risk 0.31cvss 4.7epss 0.00
A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.
- risk 0.31cvss 4.7epss 0.00
Windows Connected Devices Platform Service Information Disclosure Vulnerability