CWE-567: Unsynchronized Access to Shared Data in a Multithreaded Context
Filter
The product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior and unpredictable data changes.
What the weakness is: CWE-567 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-25 Forced Deadlock Likelihood: Low · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-567, as MITRE names them. Credits.
Ask an AI about CWE-567
Show the prompt
Explain CWE-567: Unsynchronized Access to Shared Data in a Multithreaded Context and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/567.html and https://cve.bz/cve/cwe/567?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.2CVE-2026-119574EPSS 0.3%
Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated attackers to crash the process by abusing HTTP/1 protocol upgrades. Attackers can repeatedly open and abort upgraded connection…
- 5.7CVE-2026-93319EPSS 0.09%
A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.
- 5.9CVE-2026-79969EPSS 0.3%
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability. An unauthe…
- 5.9CVE-2026-79962EPSS 0.3%
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability. An unauthe…
- 6.3CVE-2026-79973EPSS 0.2%
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Unsynchronized Access to Shared Data in a Multithreaded Context vulnerability. A low privileged attacker with remote…
- 4.3CVE-2026-73632EPSS 0.4%
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become obser…
- 4.3CVE-2026-73631EPSS 0.4%
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, a…
- 7.5CVE-2026-48708EPSS 0.4%
OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template engine uses a single shared text/template.Template instance (tpl package-level variable in service/internal/tpl/templates…
- 4.1CVE-2026-46693EPSS 0.08%
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the …
- 6.3CVE-2025-14017EPSS 0.1%
When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certifica…
- 6.7CVE-2025-48908EPSS 0.10%
Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerability may affect availability.
- 7.1CVE-2023-44374EPSS 0.7%
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8…
- 4.3CVE-2020-25724EPSS 0.6%
A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity…