cve.bz

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition), page 35

Filter

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

What the weakness is: CWE-362 at MITRE

Ask an AI about CWE-362

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/362.html and https://cve.bz/cve/cwe/362?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.0CVE-2022-42864EPSS 0.9%

    A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may…

  2. 8.1CVE-2022-44676EPSS 1.2%

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  3. 7.0CVE-2022-44669EPSS 0.3%

    Windows Error Reporting Elevation of Privilege Vulnerability

  4. 7.0CVE-2021-39660EPSS 0.07%

    In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f…

  5. 4.7CVE-2022-42771EPSS 0.09%

    In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.

  6. 4.7CVE-2022-42770EPSS 0.09%

    In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.

  7. 4.7CVE-2022-39134EPSS 0.09%

    In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.

  8. 6.4CVE-2022-32621EPSS 0.1%

    In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310829; Iss…

  9. 5.5CVE-2022-45869EPSS 0.3%

    A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are enabled.

  10. 6.4CVE-2022-45888EPSS 0.5%

    An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.

  11. 4.7CVE-2022-45887EPSS 0.3%

    An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call.

  12. 7.0CVE-2022-45886EPSS 0.3%

    An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free.

  13. 7.0CVE-2022-45885EPSS 0.3%

    An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected.

  14. 7.0CVE-2022-45884EPSS 0.3%

    An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.

  15. 3.1CVE-2022-40130EPSS 0.4%

    Auth. (subscriber+) Race Condition vulnerability in WP-Polls plugin <= 2.76.0 on WordPress.

  16. 7.8CVE-2022-28768EPSS 0.2%

    The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process…

  17. 7.5CVE-2022-41118EPSS 1.2%

    Windows Scripting Languages Remote Code Execution Vulnerability

  18. 5.9CVE-2022-41116EPSS 1.1%

    Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

  19. 7.0CVE-2022-41114EPSS 0.5%

    Windows Bind Filter Driver Elevation of Privilege Vulnerability

  20. 7.8CVE-2022-41100EPSS 0.3%

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  21. 7.8CVE-2022-41093EPSS 0.3%

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  22. 5.9CVE-2022-41090EPSS 1.1%

    Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

  23. 8.1CVE-2022-41088EPSS 1.0%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  24. 6.4CVE-2022-41086EPSS 0.3%

    Windows Group Policy Elevation of Privilege Vulnerability

  25. 7.8CVE-2022-41045EPSS 0.3%

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  26. 8.1CVE-2022-41044EPSS 1.1%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  27. 8.1CVE-2022-41039EPSS 1.1%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  28. 7.0CVE-2022-38014EPSS 0.3%

    Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

  29. 5.9CVE-2022-44563EPSS 0.4%

    There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality.

  30. 9.8CVE-2022-44551EPSS 0.5%

    The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.

  31. 8.1CVE-2022-39328EPSS 1.1%

    Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an admi…

  32. 6.4CVE-2022-32613EPSS 0.1%

    In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07206340; Issue…

  33. 6.4CVE-2022-32612EPSS 0.1%

    In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203500; Issue ID…

  34. 6.4CVE-2022-42832EPSS 0.2%

    A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.

  35. 6.4CVE-2022-42831EPSS 0.2%

    A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.

  36. 7.0CVE-2022-42806EPSS 0.2%

    A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

  37. 7.0CVE-2022-42803EPSS 0.2%

    A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary cod…

  38. 7.0CVE-2022-42791EPSS 0.3%

    A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

  39. 8.8CVE-2022-3307EPSS 0.7%

    Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  40. 4.7CVE-2022-32895EPSS 0.8%

    A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system.

  41. 6.4CVE-2022-44034EPSS 0.3%

    An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condit…

  42. 6.4CVE-2022-44033EPSS 0.4%

    An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condit…

  43. 6.4CVE-2022-44032EPSS 0.4%

    An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condit…

  44. 7.0CVE-2022-3635EPSS 0.4%

    A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is …

  45. 7.5CVE-2022-3623EPSS 1.1%

    A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack …

  46. 8.1CVE-2022-27626EPSS 1.3%

    A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute…

  47. 5.9CVE-2022-22208EPSS 0.5%

    A Use After Free vulnerability in the Routing Protocol Daemon (rdp) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service (DoS). When a BGP session flap happens, a Use…

  48. 6.4CVE-2022-3567EPSS 0.3%

    A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the component IPv6 Handler. The manipulation leads to race condition. It is recommend…

  49. 2.1CVE-2022-3566EPSS 0.7%

    A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity lev…

  50. 7.1CVE-2022-3564EPSS 1.5%

    A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after fr…