CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition), page 38

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

What the weakness is: CWE-362 at MITRE

1. 6.4CVE-2022-20091EPSS 0.08%2022-05-03

   In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; I…

2. 6.4CVE-2022-20090EPSS 0.08%2022-05-03

   In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209197; I…

3. 8.2CVE-2021-4207EPSS 0.4%2022-04-29

   A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-ba…

4. 5.5CVE-2022-1195EPSS 0.2%2022-04-29

   A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device is detached and reclaim resou…

5. 7.0CVE-2022-1048EPSS 0.2%2022-04-29

   A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a l…

6. 7.0CVE-2022-29582EPSS 0.8%2022-04-22

   In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only…

7. 7.0CVE-2022-29527EPSS 0.3%2022-04-20

   Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.

8. 7.0CVE-2022-26904KEVExploitEPSS 17%2022-04-15

   Windows User Profile Service Elevation of Privilege Vulnerability

9. 6.6CVE-2022-26829EPSS 1.9%2022-04-15

   Windows DNS Server Remote Code Execution Vulnerability

10. 7.0CVE-2022-26828EPSS 0.4%2022-04-15

    Windows Bluetooth Driver Elevation of Privilege Vulnerability

11. 7.0CVE-2022-26827EPSS 0.4%2022-04-15

    Windows File Server Resource Management Service Elevation of Privilege Vulnerability

12. 6.6CVE-2022-26822EPSS 1.9%2022-04-15

    Windows DNS Server Remote Code Execution Vulnerability

13. 6.6CVE-2022-26821EPSS 1.9%2022-04-15

    Windows DNS Server Remote Code Execution Vulnerability

14. 6.6CVE-2022-26820EPSS 1.9%2022-04-15

    Windows DNS Server Remote Code Execution Vulnerability

15. 6.6CVE-2022-26819EPSS 1.9%2022-04-15

    Windows DNS Server Remote Code Execution Vulnerability

16. 6.6CVE-2022-26817EPSS 1.7%2022-04-15

    Windows DNS Server Remote Code Execution Vulnerability

17. 6.6CVE-2022-26814EPSS 1.7%2022-04-15

    Windows DNS Server Remote Code Execution Vulnerability

18. 7.0CVE-2022-26808EPSS 0.4%2022-04-15

    Windows File Explorer Elevation of Privilege Vulnerability

19. 7.0CVE-2022-26807EPSS 0.3%2022-04-15

    Windows Work Folder Service Elevation of Privilege Vulnerability

20. 7.0CVE-2022-24540EPSS 0.4%2022-04-15

    Windows ALPC Elevation of Privilege Vulnerability

21. 7.8CVE-2022-24537EPSS 0.4%2022-04-15

    Windows Hyper-V Remote Code Execution Vulnerability

22. 7.0CVE-2022-24482EPSS 0.3%2022-04-15

    Windows ALPC Elevation of Privilege Vulnerability

23. 7.8CVE-2022-22008EPSS 0.4%2022-04-15

    Windows Hyper-V Remote Code Execution Vulnerability

24. 5.3CVE-2022-20724EPSS 1.3%2022-04-15

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying …

25. 5.3CVE-2022-27481EPSS 0.2%2022-04-12

    A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected d…

26. 6.4CVE-2022-20080EPSS 0.1%2022-04-11

    In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05881290; Iss…

27. 6.4CVE-2022-20078EPSS 0.1%2022-04-11

    In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05852819; Issue …

28. 6.4CVE-2022-20077EPSS 0.1%2022-04-11

    In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue …

29. 7.0CVE-2022-28796EPSS 0.3%2022-04-08

    jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.

30. 7.0CVE-2022-26357EPSS 0.3%2022-04-05

    race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are ma…

31. 2.5CVE-2018-25030EPSS 0.3%2022-03-28

    A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the…

32. 6.8CVE-2021-4203EPSS 1.7%2022-03-25

    A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system…

33. 7.0CVE-2021-4202EPSS 0.4%2022-03-25

    A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is gettin…

34. 5.9CVE-2022-24302EPSS 2.1%2022-03-17

    In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

35. 4.1CVE-2021-39792EPSS 0.10%2022-03-16

    In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not neede…

36. 6.4CVE-2021-39735EPSS 0.09%2022-03-16

    In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed…

37. 4.1CVE-2021-39727EPSS 0.10%2022-03-16

    In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges ne…

38. 7.0CVE-2021-39713EPSS 0.2%2022-03-16

    Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel

39. 6.4CVE-2021-39712EPSS 0.09%2022-03-16

    In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: An…

40. 7.0CVE-2021-39686EPSS 0.2%2022-03-16

    In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i…

41. 7.4CVE-2022-24751EPSS 1.0%2022-03-16

    Zulip is an open source group chat application. Starting with version 4.0 and prior to version 4.11, Zulip is vulnerable to a race condition during account deactivation, where a simultaneous access by the user being deactivated may, in rar…

42. 7.0CVE-2022-23042EPSS 0.3%2022-03-10

    Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…

43. 7.0CVE-2022-23041EPSS 0.4%2022-03-10

    Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…

44. 7.0CVE-2022-23040EPSS 0.4%2022-03-10

    Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…

45. 7.0CVE-2022-23039EPSS 0.4%2022-03-10

    Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…

46. 7.0CVE-2022-23038EPSS 0.4%2022-03-10

    Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…

47. 7.0CVE-2022-23037EPSS 0.3%2022-03-10

    Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…

48. 7.0CVE-2022-23036EPSS 0.4%2022-03-10

    Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…

49. 6.2CVE-2022-25822EPSS 0.09%2022-03-10

    An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash.

50. 8.1CVE-2022-25090ExploitEPSS 11%2022-03-10

    Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition.