CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition), page 36

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

What the weakness is: CWE-362 at MITRE

1. 2.5CVE-2022-3521EPSS 0.2%2022-10-16

   A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommend…

2. 7.0CVE-2021-0696EPSS 0.08%2022-10-11

   In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.…

3. 5.3CVE-2022-41035EPSS 1.8%2022-10-11

   Microsoft Edge (Chromium-based) Spoofing Vulnerability

4. 8.1CVE-2022-38047EPSS 1.5%2022-10-11

   Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

5. 7.0CVE-2022-38029EPSS 0.8%2022-10-11

   Windows ALPC Elevation of Privilege Vulnerability

6. 7.0CVE-2022-38027EPSS 0.4%2022-10-11

   Windows Storage Elevation of Privilege Vulnerability

7. 7.0CVE-2022-38021EPSS 0.4%2022-10-11

   Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

8. 8.1CVE-2022-38000EPSS 1.6%2022-10-11

   Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

9. 8.1CVE-2022-33634EPSS 1.5%2022-10-11

   Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

10. 8.1CVE-2022-30198EPSS 1.5%2022-10-11

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

11. 8.1CVE-2022-24504EPSS 1.5%2022-10-11

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

12. 8.1CVE-2022-22035EPSS 1.6%2022-10-11

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

13. 4.7CVE-2022-41850EPSS 0.2%2022-09-30

    roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress.

14. 4.2CVE-2022-41849EPSS 0.3%2022-09-30

    drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a race condition between ufx_ops_open and…

15. 4.2CVE-2022-41848EPSS 0.3%2022-09-30

    drivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl, aka a race condition between mgslpc_ioc…

16. 3.7CVE-2021-43980EPSS 2.4%2022-09-28

    The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extremely hard to trigger) concurrency bug in Apache Tomcat 10.1.0 to 10.1.0-M12, 10.0…

17. 4.7CVE-2022-3303EPSS 0.3%2022-09-27

    A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) …

18. 8.8CVE-2022-3071EPSS 0.6%2022-09-26

    Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction.

19. 8.8CVE-2022-3049EPSS 0.7%2022-09-26

    Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.

20. 8.8CVE-2022-3042EPSS 0.6%2022-09-26

    Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

21. 8.8CVE-2022-2857EPSS 0.8%2022-09-26

    Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

22. 8.8CVE-2022-2854EPSS 0.8%2022-09-26

    Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

23. 3.1CVE-2022-40310EPSS 0.5%2022-09-23

    Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes.

24. 7.5CVE-2016-20015EPSS 0.7%2022-09-20

    In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving …

25. 5.9CVE-2022-39006EPSS 0.4%2022-09-16

    The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.

26. 7.0CVE-2021-0697EPSS 0.08%2022-09-13

    In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

27. 7.0CVE-2022-34725EPSS 5.4%2022-09-13

    Windows ALPC Elevation of Privilege Vulnerability

28. 7.0CVE-2022-26928EPSS 0.8%2022-09-13

    Windows Photo Import API Elevation of Privilege Vulnerability

29. 3.1CVE-2022-36422EPSS 0.5%2022-09-09

    Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin <= 1.89 at WordPress.

30. 4.7CVE-2022-40307EPSS 0.2%2022-09-09

    An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.

31. 6.4CVE-2022-26450EPSS 0.08%2022-09-06

    In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07177801; Issue…

32. 4.7CVE-2022-39188EPSS 0.2%2022-09-02

    An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs i…

33. 7.0CVE-2022-1729EPSS 0.3%2022-09-01

    A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary …

34. 7.0CVE-2022-3028EPSS 0.2%2022-08-31

    A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of…

35. 7.0CVE-2022-2590EPSS 0.9%2022-08-31

    A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only …

36. 7.0CVE-2022-1247EPSS 0.3%2022-08-31

    An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects are using the rose_neigh. When a user wants to delete a rose_route via rose_ioctl(), the ro…

37. 7.0CVE-2022-2961EPSS 0.3%2022-08-29

    A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or po…

38. 4.7CVE-2022-0207EPSS 0.2%2022-08-26

    A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.

39. 7.0CVE-2022-2959EPSS 0.4%2022-08-25

    A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing opera…

40. 6.3CVE-2021-3702EPSS 0.2%2022-08-23

    A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's private_data_dir t…

41. 6.8CVE-2021-20316EPSS 1.0%2022-08-23

    A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.

42. 7.0CVE-2022-24951EPSS 0.3%2022-08-16

    A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.

43. 7.5CVE-2022-24950EPSS 1.3%2022-08-16

    A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in …

44. 7.5CVE-2022-24949EPSS 1.1%2022-08-16

    A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen().

45. 8.8CVE-2022-2623EPSS 0.7%2022-08-12

    Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.

46. 8.8CVE-2022-2617EPSS 0.4%2022-08-12

    Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.

47. 8.8CVE-2022-2609EPSS 0.5%2022-08-12

    Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.

48. 8.8CVE-2022-2608EPSS 0.5%2022-08-12

    Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.

49. 8.8CVE-2022-2607EPSS 0.5%2022-08-12

    Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.

50. 6.4CVE-2022-20256EPSS 0.08%2022-08-12

    In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVe…