cve.bz

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition), page 9

Filter

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

What the weakness is: CWE-362 at MITRE

Ask an AI about CWE-362

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/362.html and https://cve.bz/cve/cwe/362?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 1.2CVE-2026-16211EPSS 0.2%

    A vulnerability was determined in allegro up to bcf65b994ef29fb3fc2e10b660e6288723d5209e. This impacts the function AssetLastHostname.increment_hostname of the file src/ralph/assets/models/assets.py of the component Hostname Allocation Han…

  2. 2.3CVE-2026-16208EPSS 0.3%

    A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The …

  3. 1.9CVE-2026-16082EPSS 0.1%

    A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function ExecTool.executeRun of the file pkg/agent/pipeline_execute.go. The manipulation of the argument cwe leads to time-of-check time-of-use. The…

  4. 6.8CVE-2026-54497EPSS 0.3%

    view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 until 4.12.0, ViewComponent::Base instances retain render-scoped objects across calls to render_in; if the same co…

  5. 4.2CVE-2026-15995EPSS 0.2%

    IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's…

  6. 7.2CVE-2026-51082EPSS 0.4%

    A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager before 9.1.9 and 8.x before 8.4.19; qemu-server 9.x before 9.1.7 and 8.x before 8.4.7; and pve-container before 6.1.3 (PV…

  7. 7.0CVE-2026-58598EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

  8. 7.6CVE-2026-53518EPSS 0.4%

    Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the authorization_code grant redeems a single-use authorization code throug…

  9. 8.1CVE-2026-53517EPSS 0.4%

    Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint on the refresh_token grant performs a non-atomic read, validate, revoke,…

  10. 5.1CVE-2026-62294EPSS 0.1%

    Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local …

  11. 7.8CVE-2026-58628EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

  12. 6.3CVE-2026-58543EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a physical attack.

  13. 7.5CVE-2026-58531EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.

  14. 7.0CVE-2026-58527EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  15. 8.1CVE-2026-56649EPSS 0.7%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.

  16. 8.1CVE-2026-56188EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

  17. 7.8CVE-2026-54125EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  18. 7.8CVE-2026-50689EPSS 0.3%

    Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

  19. 7.8CVE-2026-50677EPSS 0.3%

    Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

  20. 7.0CVE-2026-50676EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.

  21. 7.0CVE-2026-50672EPSS 0.2%

    Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

  22. 7.0CVE-2026-50669EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  23. 7.0CVE-2026-50667EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

  24. 7.0CVE-2026-50503EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  25. 8.1CVE-2026-50460EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

  26. 7.8CVE-2026-50458EPSS 0.3%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  27. 7.8CVE-2026-50457EPSS 0.3%

    Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

  28. 8.1CVE-2026-50452EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

  29. 7.0CVE-2026-50450EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

  30. 7.0CVE-2026-50440EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2026-50427EPSS 0.3%

    Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally.

  32. 8.8CVE-2026-50414EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

  33. 7.0CVE-2026-50404EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.

  34. 7.0CVE-2026-50403EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  35. 7.5CVE-2026-50398EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

  36. 8.8CVE-2026-50385EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  37. 7.5CVE-2026-50379EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

  38. 7.0CVE-2026-50378EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.

  39. 7.0CVE-2026-50371EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally.

  40. 8.8CVE-2026-50369EPSS 0.7%

    Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

  41. 7.8CVE-2026-50361EPSS 0.3%

    Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  42. 8.1CVE-2026-50348EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

  43. 7.0CVE-2026-50345EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  44. 7.0CVE-2026-50322EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  45. 7.0CVE-2026-50321EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.

  46. 7.0CVE-2026-50317EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

  47. 7.8CVE-2026-50305EPSS 0.3%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  48. 7.5CVE-2026-58608EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.

  49. 7.8CVE-2026-58526EPSS 0.2%

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

  50. 8.8CVE-2026-54999EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.