Weaknesses of type CWE-362

1,090 results

Condição de corrida

Ocorre quando dois ou mais processos/threads acessam e modificam um recurso compartilhado simultaneamente, sem sincronização adequada. O resultado final depende da ordem e timing das operações, criando estados inconsistentes que podem ser explorados para contornar controles de segurança, corromper dados ou ganhar privilégios.

Example

Um aplicativo verifica se um arquivo existe e tem permissão de leitura (check), depois o abre (use). Um atacante, entre o check e o use, substitui o arquivo por um link simbólico apontando para /etc/passwd. O programa abre inadvertidamente um arquivo sensível que não deveria acessar.

How to mitigate

Use primitivas de sincronização (mutexes, semáforos, locks) para serializar acessos críticos. Quando possível, use operações atômicas do SO (ex: open com flags O_EXCL) que combinam check e use em uma única syscall indivisível. Validar estado antes de cada operação crítica, não apenas uma vez.

CVE-2026-13905MEDIUMRace in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information fEPSS 0.1%CVE-2026-58093HIGHKernel use-after-free via tty ioctlsEPSS 0.1%CVE-2025-68960HIGHMulti-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect avEPSS 0.1%CVE-2026-28543MEDIUMRace condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect avaEPSS 0.1%CVE-2022-32645MEDIUMIn vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execEPSS 0.1%CVE-2025-22830HIGHSmiFlash Race Condition VulnerabilityEPSS 0.1%CVE-2026-34857MEDIUMUAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-52515MEDIUMAn issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race cEPSS 0.1%CVE-2023-53447MEDIUMf2fs: don't reset unchangable mount option in f2fs_remount()EPSS 0.1%CVE-2023-53329MEDIUMworkqueue: fix data race with the pwq->stats[] incrementEPSS 0.1%CVE-2026-24199MEDIUMNVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compileEPSS 0.1%CVE-2026-34858MEDIUMUAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-68961MEDIUMMulti-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aEPSS 0.1%CVE-2024-54122MEDIUMConcurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availabilityEPSS 0.1%CVE-2024-32908HIGHIn sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of priviEPSS 0.1%CVE-2026-19139HIGHRace in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalaEPSS 0.1%CVE-2026-34861MEDIUMRace condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availabilityEPSS 0.1%CVE-2026-34862MEDIUMRace condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect avEPSS 0.1%CVE-2026-58848HIGHIn multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalEPSS 0.1%CVE-2026-17993HIGHRace in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious EPSS 0.1%