cve.bz

OWASP A06:2025 Insecure Design vulnerabilities, newest first, page 75

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A06:2025 at MITRE.

Its weaknesses: 39

CWE-73, CWE-183, CWE-256, CWE-266, CWE-269, CWE-286, CWE-311, CWE-312, CWE-313, CWE-316, CWE-362, CWE-382, CWE-419, CWE-434, CWE-436, CWE-444, CWE-451, CWE-454, CWE-472, CWE-501, CWE-522, CWE-525, CWE-539, CWE-598, CWE-602, CWE-628, CWE-642, CWE-646, CWE-653, CWE-656, CWE-657, CWE-676, CWE-693, CWE-799, CWE-807, CWE-841, CWE-1021, CWE-1022, CWE-1125

  1. 7.8CVE-2026-58628EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

  2. 6.3CVE-2026-58543EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a physical attack.

  3. 7.5CVE-2026-58531EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.

  4. 7.0CVE-2026-58527EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  5. 8.1CVE-2026-56649EPSS 0.7%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.

  6. 8.1CVE-2026-56188EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

  7. 7.8CVE-2026-54125EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2026-50689EPSS 0.3%

    Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-50677EPSS 0.3%

    Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-50676EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.

  11. 7.0CVE-2026-50672EPSS 0.2%

    Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

  12. 7.0CVE-2026-50669EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  13. 7.0CVE-2026-50667EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

  14. 4.6CVE-2026-50661EPSS 0.5%

    Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  15. 7.0CVE-2026-50503EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2026-50462EPSS 0.5%

    External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  17. 8.1CVE-2026-50460EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

  18. 7.8CVE-2026-50458EPSS 0.3%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  19. 7.8CVE-2026-50457EPSS 0.3%

    Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

  20. 8.1CVE-2026-50452EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

  21. 7.0CVE-2026-50450EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

  22. 7.0CVE-2026-50440EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  23. 7.8CVE-2026-50427EPSS 0.3%

    Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally.

  24. 8.8CVE-2026-50414EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

  25. 7.0CVE-2026-50404EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.

  26. 7.0CVE-2026-50403EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  27. 7.5CVE-2026-50398EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

  28. 7.8CVE-2026-50391EPSS 0.3%

    Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

  29. 8.8CVE-2026-50385EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  30. 7.5CVE-2026-50379EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

  31. 7.0CVE-2026-50378EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.

  32. 7.0CVE-2026-50371EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally.

  33. 8.8CVE-2026-50369EPSS 0.7%

    Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

  34. 7.8CVE-2026-50361EPSS 0.3%

    Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  35. 8.1CVE-2026-50348EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

  36. 7.0CVE-2026-50345EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2026-50343EPSS 0.3%

    Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

  38. 7.0CVE-2026-50322EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

  39. 7.0CVE-2026-50321EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.

  40. 7.0CVE-2026-50317EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-50305EPSS 0.3%

    Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

  42. 2.3CVE-2026-45066EPSS 0.3%

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, HtmlSanitizer URL sanitization can allow off-allowlist URLs through allowLinkHosts() or al…

  43. 9.6CVE-2026-59891EPSS 0.5%

    sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, getRegistryCredentials() reads credentials from the Docker config file and selects an entry by checking whether any configured auth key conta…

  44. 7.5CVE-2026-58608EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.

  45. 8.1CVE-2026-58595EPSS 0.7%

    Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.

  46. 7.8CVE-2026-58526EPSS 0.2%

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

  47. 8.8CVE-2026-55002EPSS 0.9%

    External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

  48. 8.8CVE-2026-54999EPSS 0.4%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

  49. 7.0CVE-2026-54996EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  50. 7.0CVE-2026-54991EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.