Weaknesses of type CWE-362

1,091 results

Condição de corrida

Ocorre quando dois ou mais processos/threads acessam e modificam um recurso compartilhado simultaneamente, sem sincronização adequada. O resultado final depende da ordem e timing das operações, criando estados inconsistentes que podem ser explorados para contornar controles de segurança, corromper dados ou ganhar privilégios.

Example

Um aplicativo verifica se um arquivo existe e tem permissão de leitura (check), depois o abre (use). Um atacante, entre o check e o use, substitui o arquivo por um link simbólico apontando para /etc/passwd. O programa abre inadvertidamente um arquivo sensível que não deveria acessar.

How to mitigate

Use primitivas de sincronização (mutexes, semáforos, locks) para serializar acessos críticos. Quando possível, use operações atômicas do SO (ex: open com flags O_EXCL) que combinam check e use em uma única syscall indivisível. Validar estado antes de cada operação crítica, não apenas uma vez.

CVE-2026-0995LOWAn issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completiEPSS 0.1%CVE-2024-51515MEDIUMRace condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2022-42770MEDIUMIn wlan driver, there is a race condition, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-42771MEDIUMIn wlan driver, there is a race condition, This could lead to local denial of service in wlan services.EPSS 0.1%CVE-2022-25822MEDIUMAn use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash.EPSS 0.1%CVE-2025-1351MEDIUMIBM Storage Virtualize privilege escalationEPSS 0.1%CVE-2022-39134MEDIUMIn audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.EPSS 0.1%CVE-2025-48533HIGHIn multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This coulEPSS 0.1%CVE-2025-54602HIGHAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480EPSS 0.1%CVE-2026-44059LOWNon-reentrant privilege toggleEPSS 0.1%CVE-2024-32891HIGHIn sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of priEPSS 0.1%CVE-2024-58048MEDIUMMulti-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availabEPSS 0.1%CVE-2026-28544MEDIUMRace condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2024-58045HIGHMulti-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may aEPSS 0.1%CVE-2025-54601HIGHAn issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480EPSS 0.1%CVE-2024-31327MEDIUMIn multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalEPSS 0.1%CVE-2026-28549MEDIUMRace condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availabiEPSS 0.1%CVE-2026-28545MEDIUMRace condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2024-34724HIGHIn _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalationEPSS 0.1%CVE-2023-21031MEDIUMIn setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosureEPSS 0.1%