CWE-363 Race Condition Enabling Link Following
baseThe product checks the status of a file or directory before accessing it, which produces a race condition in which the file can be replaced with a link before the access is performed, causing the product to access the wrong file.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (22)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-31133US | high7.8 | Exploit | ||
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, r… | ||||
| CVE-2025-52881US | high7.5 | Exploit | ||
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting wri… | ||||
| CVE-2025-62596US | critical10.0 | — | ||
Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with… | ||||
| CVE-2025-62161US | critical10.0 | — | ||
Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki util… | ||||
| CVE-2022-21658US | medium6.3 | Exploit | ||
Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the… | ||||
| CVE-2024-27102US | high8.5 | — | ||
Wings is the server control plane for Pterodactyl Panel. This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can potentially be used to acce… | ||||
| CVE-2021-26324US | high7.8 | — | ||
A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs. | ||||
| CVE-2025-52565US | high7.5 | — | ||
runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-… | ||||
| CVE-2025-13492US | high7.0 | — | ||
A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability
could potentially allow a local attacker… | ||||
| CVE-2022-38730US | medium6.3 | — | ||
Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerBackendV2 API by controlling the data-root field inside the D… | ||||
| CVE-2026-91205US | medium6.0 | — | ||
A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent dire… | ||||
| CVE-2026-91203US | medium6.0 | — | ||
A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged file operations such a… | ||||
| CVE-2026-71125US | medium6.1 | — | ||
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability a… | ||||
| CVE-2026-43317US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
most: core: fix leak on early registration failure
A recent commit fixed a resource leak on early registration… | ||||
| CVE-2022-25641US | medium5.5 | — | ||
Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed docu… | ||||
| CVE-2023-6857US | medium5.3 | — | ||
When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary.
*This bug only affects Firefox on Unix-based operating sys… | ||||
| CVE-2018-6693US | medium5.3 | — | ||
An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use… | ||||
| CVE-2024-45310US | low3.6 | — | ||
runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating e… | ||||
| CVE-2010-4472US | low2.6 | — | ||
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, rela… | ||||
| CVE-2026-112940US | — | — | ||
filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX systems an attacker… | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan