CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
classThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
untergeordnete Schwächen
Spezifischere Einträge unterhalb dieses.
03
Schwachstellen (4139)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-62215US | —OT kritisch | KEV | ||
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-39964US | medium5.5OT kritisch | KEV | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
Issuing two writes to the same af_alg socket is… | ||||
| CVE-2025-2783US | —OT kritisch | KEV | ||
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malic… | ||||
| CVE-2025-22224US | high8.2OT kritisch | KEV | ||
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges… | ||||
| CVE-2023-36884US | —OT kritisch | KEV | ||
Windows Search Remote Code Execution Vulnerability | ||||
| CVE-2023-28229US | —OT kritisch | KEV | ||
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | ||||
| CVE-2022-26904US | medium4.4OT kritisch | KEV | ||
Windows User Profile Service Elevation of Privilege Vulnerability | ||||
| CVE-2021-0920US | medium6.4OT kritisch | KEV | ||
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges n… | ||||
| CVE-2021-25395US | medium6.4OT kritisch | KEV | ||
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised. | ||||
| CVE-2021-25394US | medium6.4OT kritisch | KEV | ||
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised. | ||||
| CVE-2021-1782US | high7.0OT kritisch | KEV | ||
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tv… | ||||
| CVE-2021-21166US | high8.8OT kritisch | KEV | ||
Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
| CVE-2020-6820US | high8.1OT kritisch | KEV | ||
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerab… | ||||
| CVE-2020-6819US | high8.1OT kritisch | KEV | ||
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This… | ||||
| CVE-2016-5195US | high7.0OT kritisch | KEV | ||
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature… | ||||
| CVE-2014-0196US | medium6.9OT kritisch | KEV | ||
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users… | ||||
| CVE-2024-6387US | high8.1 | Exploit | ||
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth… | ||||
| CVE-2022-23270US | high9.3 | Exploit | ||
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | ||||
| CVE-2014-0226US | medium6.8 | Exploit | ||
Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtai… | ||||
| CVE-2018-15473US | medium5.3 | Exploit | ||
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has be… | ||||
04
Angriffsmuster (2)
CAPEC-Angriffsmuster, die dies ausnutzen.
05
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan