cve.bz

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition), page 37

Filter

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

What the weakness is: CWE-362 at MITRE

Ask an AI about CWE-362

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/362.html and https://cve.bz/cve/cwe/362?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.4CVE-2022-20373EPSS 0.08%

    In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…

  2. 7.0CVE-2022-20344EPSS 0.09%

    In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User inter…

  3. 7.5CVE-2022-35796EPSS 1.4%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  4. 8.1CVE-2022-34702EPSS 1.3%

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  5. 7.8CVE-2022-34696EPSS 0.3%

    Windows Hyper-V Remote Code Execution Vulnerability

  6. 8.3CVE-2022-33636EPSS 1.3%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  7. 8.1CVE-2022-37035EPSS 2.6%

    An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Inform…

  8. 6.4CVE-2022-26428EPSS 0.07%

    In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0652126…

  9. 6.4CVE-2022-21789EPSS 0.2%

    In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06478101;…

  10. 6.5CVE-2022-2160EPSS 0.7%

    Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files …

  11. 5.1CVE-2020-36558EPSS 0.3%

    A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.

  12. 5.1CVE-2020-36557EPSS 0.2%

    A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.

  13. 7.8CVE-2022-34892EPSS 0.3%

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in orde…

  14. 6.6CVE-2022-30214EPSS 1.1%

    Windows DNS Server Remote Code Execution Vulnerability

  15. 4.7CVE-2022-30212EPSS 0.5%

    Windows Connected Devices Platform Service Information Disclosure Vulnerability

  16. 6.6CVE-2022-30205EPSS 1.2%

    Windows Group Policy Elevation of Privilege Vulnerability

  17. 8.1CVE-2022-24800EPSS 1.5%

    October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prior to versions 1.0.476, 1.1.12, and 2.2.15, when the developer allows the user to specify their own filename in the `fro…

  18. 6.4CVE-2022-21776EPSS 0.08%

    In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID…

  19. 6.7CVE-2022-21774EPSS 0.09%

    In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641447; …

  20. 6.7CVE-2022-21773EPSS 0.09%

    In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641388; …

  21. 6.7CVE-2022-21772EPSS 0.09%

    In TEEI driver, there is a possible type confusion due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06493842; …

  22. 6.7CVE-2022-21771EPSS 0.09%

    In GED driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641585; I…

  23. 7.0CVE-2022-20082EPSS 0.08%

    In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; I…

  24. 5.9CVE-2022-30028EPSS 0.5%

    Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.

  25. 7.0CVE-2022-33915EPSS 0.2%

    Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating t…

  26. 8.5CVE-2022-30163EPSS 1.9%

    Windows Hyper-V Remote Code Execution Vulnerability

  27. 7.0CVE-2022-20155EPSS 0.08%

    In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. U…

  28. 6.4CVE-2022-20154EPSS 0.1%

    In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: A…

  29. 6.4CVE-2022-20148EPSS 0.1%

    In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: And…

  30. 7.0CVE-2022-20141EPSS 0.1%

    In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interacti…

  31. 7.8CVE-2022-22057EPSS 0.4%

    Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdrago…

  32. 4.7CVE-2022-31758EPSS 0.1%

    The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

  33. 6.4CVE-2022-26362EPSS 0.4%

    x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direc…

  34. 6.3CVE-2022-1462EPSS 0.3%

    An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_l…

  35. 8.3CVE-2022-30128EPSS 2.0%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  36. 8.3CVE-2022-30127EPSS 2.0%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  37. 5.9CVE-2022-31015EPSS 1.5%

    Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select(). This will lead to the main thread…

  38. 4.7CVE-2022-26765EPSS 0.2%

    A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious attacker with arbitrary read and write capability may be able to bypass …

  39. 7.5CVE-2022-26701EPSS 1.3%

    A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.

  40. 4.7CVE-2022-26690EPSS 1.7%

    Description: A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to modify protected parts of the file system.

  41. 5.9CVE-2021-3597EPSS 1.2%

    A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions…

  42. 7.0CVE-2021-3922EPSS 1.9%

    A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and interact with the IMController child proces…

  43. 4.7CVE-2021-33078EPSS 0.2%

    Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to potentially enable denial of service via local access.

  44. 4.7CVE-2021-33075EPSS 0.2%

    Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a privileged user to potentially enable denial of service via local access.

  45. 4.7CVE-2022-29116EPSS 0.6%

    Windows Kernel Information Disclosure Vulnerability

  46. 7.8CVE-2022-29113EPSS 0.4%

    Windows Digital Media Receiver Elevation of Privilege Vulnerability

  47. 7.0CVE-2022-20118EPSS 0.09%

    In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex…

  48. 7.0CVE-2022-20007EPSS 0.2%

    In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation …

  49. 7.0CVE-2022-20006EPSS 0.1%

    In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condition. This could lead to local escalation of privilege if a Guest user is enable…

  50. 4.7CVE-2022-20097EPSS 0.08%

    In aee daemon, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…