Weaknesses of type CWE-362

1,090 results

Condição de corrida

Ocorre quando dois ou mais processos/threads acessam e modificam um recurso compartilhado simultaneamente, sem sincronização adequada. O resultado final depende da ordem e timing das operações, criando estados inconsistentes que podem ser explorados para contornar controles de segurança, corromper dados ou ganhar privilégios.

Example

Um aplicativo verifica se um arquivo existe e tem permissão de leitura (check), depois o abre (use). Um atacante, entre o check e o use, substitui o arquivo por um link simbólico apontando para /etc/passwd. O programa abre inadvertidamente um arquivo sensível que não deveria acessar.

How to mitigate

Use primitivas de sincronização (mutexes, semáforos, locks) para serializar acessos críticos. Quando possível, use operações atômicas do SO (ex: open com flags O_EXCL) que combinam check e use em uma única syscall indivisível. Validar estado antes de cada operação crítica, não apenas uma vez.

CVE-2023-53020MEDIUMl2tp: close all race conditions in l2tp_tunnel_register()EPSS 0.1%CVE-2026-45404MEDIUMOpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent accessEPSS 0.1%CVE-2024-46971HIGHGPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systemsEPSS 0.1%CVE-2024-47892HIGHGPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)EPSS 0.1%CVE-2026-26071MEDIUMEVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑FreeEPSS 0.1%CVE-2025-20104MEDIUMRace condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user tEPSS 0.1%CVE-2026-26072MEDIUMEVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_mapEPSS 0.1%CVE-2026-71968HIGHOP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENTEPSS 0.1%CVE-2024-54102MEDIUMRace condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.EPSS 0.1%CVE-2022-20567HIGHIn pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privileEPSS 0.1%CVE-2023-53345MEDIUMrxrpc: Fix potential data race in rxrpc_wait_to_be_connected()EPSS 0.1%CVE-2024-32993MEDIUMOut-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%CVE-2026-28891HIGHA race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.EPSS 0.1%CVE-2026-28817HIGHA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 2EPSS 0.1%CVE-2026-92628LOWConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLabEPSS 0.1%CVE-2026-9040HIGHMali GPU Kernel Driver allows denial of service or disclosure of sensitive informationEPSS 0.1%CVE-2024-32997HIGHRace condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%CVE-2025-43420MEDIUMA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 2EPSS 0.1%CVE-2025-61792MEDIUMQuadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, EPSS 0.1%CVE-2026-84507HIGHA race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS GoEPSS 0.1%