cve.bz

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition), page 34

Filter

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

What the weakness is: CWE-362 at MITRE

Ask an AI about CWE-362

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/362.html and https://cve.bz/cve/cwe/362?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.0CVE-2023-28273EPSS 0.2%

    Windows Clip Service Elevation of Privilege Vulnerability

  2. 7.5CVE-2023-28232EPSS 0.9%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  3. 6.4CVE-2023-20687EPSS 0.07%

    In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570772; Iss…

  4. 6.4CVE-2023-20686EPSS 0.07%

    In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570826; Iss…

  5. 6.4CVE-2023-20685EPSS 0.07%

    In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue I…

  6. 6.4CVE-2023-20684EPSS 0.07%

    In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue I…

  7. 4.7CVE-2023-1582EPSS 0.1%

    A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service.

  8. 7.5CVE-2022-48221EPSS 0.5%

    An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user writable directory. Through a race condition and OpLock manipulation, these files can be overwritten by a standard user. T…

  9. 4.7CVE-2023-21031EPSS 0.08%

    In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Pr…

  10. 7.0CVE-2023-28144EPSS 0.3%

    KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls.

  11. 7.0CVE-2023-24861EPSS 0.3%

    Windows Graphics Component Elevation of Privilege Vulnerability

  12. 7.1CVE-2023-23407EPSS 0.4%

    Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

  13. 8.1CVE-2023-23404EPSS 0.8%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  14. 7.0CVE-2023-23393EPSS 0.2%

    Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability

  15. 3.7CVE-2022-48366EPSS 0.5%

    An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.

  16. 5.9CVE-2021-20251EPSS 0.8%

    A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.

  17. 4.7CVE-2022-46713EPSS 0.2%

    A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system.

  18. 6.3CVE-2022-32844EPSS 0.2%

    A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app with arbitrary kernel read and write capability may be able to bypass Pointer Authentication.

  19. 5.7CVE-2023-23039EPSS 0.2%

    An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open(), aka a race condition between v…

  20. 7.0CVE-2020-19824EPSS 0.2%

    An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.

  21. 7.0CVE-2022-32764EPSS 0.1%

    Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege via local access.

  22. 4.7CVE-2022-47331EPSS 0.07%

    In wlan driver, there is a race condition. This could lead to local denial of service in wlan services.

  23. 6.8CVE-2023-0739EPSS 0.7%

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4.

  24. 8.1CVE-2022-42951EPSS 0.7%

    An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time (before the cluster management authenticati…

  25. 8.1CVE-2021-36532EPSS 0.8%

    Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.

  26. 5.3CVE-2021-46873EPSS 0.5%

    WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outco…

  27. 7.5CVE-2023-24042EPSS 0.5%

    A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context->FileName.

  28. 8.1CVE-2015-10067EPSS 0.6%

    A vulnerability was found in oznetmaster SSharpSmartThreadPool. It has been classified as problematic. This affects an unknown part of the file SSharpSmartThreadPool/SmartThreadPool.cs. The manipulation leads to race condition within a thr…

  29. 7.5CVE-2023-22499EPSS 0.6%

    Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to …

  30. 8.5CVE-2022-4037EPSS 0.7%

    An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A race condition can lead to verified email forgery and takeov…

  31. 7.0CVE-2023-21771EPSS 0.4%

    Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability

  32. 4.7CVE-2023-21766EPSS 0.9%

    Windows Overlay Filter Information Disclosure Vulnerability

  33. 7.0CVE-2023-21733EPSS 0.3%

    Windows Bind Filter Driver Elevation of Privilege Vulnerability

  34. 6.3CVE-2023-21725EPSS 0.4%

    Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

  35. 8.1CVE-2023-21679EPSS 1.1%

    Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

  36. 8.1CVE-2023-21546EPSS 1.1%

    Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

  37. 7.0CVE-2023-21542EPSS 0.3%

    Windows Installer Elevation of Privilege Vulnerability

  38. 4.7CVE-2023-21536EPSS 0.4%

    Event Tracing for Windows Information Disclosure Vulnerability

  39. 8.1CVE-2023-21535EPSS 1.1%

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  40. 4.1CVE-2022-32645EPSS 0.10%

    In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494477; I…

  41. 8.8CVE-2022-2742EPSS 0.4%

    Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interact…

  42. 4.2CVE-2022-46174EPSS 0.6%

    efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helpe…

  43. 3.7CVE-2022-2583EPSS 0.4%

    A race condition can cause incorrect HTTP request routing.

  44. 7.1CVE-2022-42930EPSS 0.4%

    If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component. This vulnerability affects Firefox < 106.

  45. 5.3CVE-2022-36318EPSS 0.5%

    When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.

  46. 8.8CVE-2022-22763EPSS 0.6%

    When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability affects Firefox < 96, Thunderbird < 91.6, and Firefox ESR < 91.6.

  47. 5.9CVE-2022-22746EPSS 0.6%

    A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vul…

  48. 7.5CVE-2022-22737EPSS 0.8%

    Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Fir…

  49. 6.4CVE-2022-20567EPSS 0.1%

    In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product…

  50. 7.0CVE-2022-46689ExploitEPSS 48%

    A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may b…