CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
classThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (4139)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-62215US | —OT critical | KEV | ||
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-39964US | medium5.5OT critical | KEV | ||
In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
Issuing two writes to the same af_alg socket is… | ||||
| CVE-2025-2783US | —OT critical | KEV | ||
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malic… | ||||
| CVE-2025-22224US | high8.2OT critical | KEV | ||
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges… | ||||
| CVE-2023-36884US | —OT critical | KEV | ||
Windows Search Remote Code Execution Vulnerability | ||||
| CVE-2023-28229US | —OT critical | KEV | ||
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability | ||||
| CVE-2022-26904US | medium4.4OT critical | KEV | ||
Windows User Profile Service Elevation of Privilege Vulnerability | ||||
| CVE-2021-0920US | medium6.4OT critical | KEV | ||
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges n… | ||||
| CVE-2021-25395US | medium6.4OT critical | KEV | ||
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised. | ||||
| CVE-2021-25394US | medium6.4OT critical | KEV | ||
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised. | ||||
| CVE-2021-1782US | high7.0OT critical | KEV | ||
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tv… | ||||
| CVE-2021-21166US | high8.8OT critical | KEV | ||
Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||||
| CVE-2020-6820US | high8.1OT critical | KEV | ||
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerab… | ||||
| CVE-2020-6819US | high8.1OT critical | KEV | ||
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This… | ||||
| CVE-2016-5195US | high7.0OT critical | KEV | ||
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature… | ||||
| CVE-2014-0196US | medium6.9OT critical | KEV | ||
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users… | ||||
| CVE-2024-6387US | high8.1 | Exploit | ||
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth… | ||||
| CVE-2022-23270US | high9.3 | Exploit | ||
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | ||||
| CVE-2014-0226US | medium6.8 | Exploit | ||
Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtai… | ||||
| CVE-2018-15473US | medium5.3 | Exploit | ||
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has be… | ||||
04
attack patterns (2)
CAPEC attack patterns that exploit this.
05
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan