Weaknesses of type CWE-362

1,091 results

Condição de corrida

Ocorre quando dois ou mais processos/threads acessam e modificam um recurso compartilhado simultaneamente, sem sincronização adequada. O resultado final depende da ordem e timing das operações, criando estados inconsistentes que podem ser explorados para contornar controles de segurança, corromper dados ou ganhar privilégios.

Example

Um aplicativo verifica se um arquivo existe e tem permissão de leitura (check), depois o abre (use). Um atacante, entre o check e o use, substitui o arquivo por um link simbólico apontando para /etc/passwd. O programa abre inadvertidamente um arquivo sensível que não deveria acessar.

How to mitigate

Use primitivas de sincronização (mutexes, semáforos, locks) para serializar acessos críticos. Quando possível, use operações atômicas do SO (ex: open com flags O_EXCL) que combinam check e use em uma única syscall indivisível. Validar estado antes de cada operação crítica, não apenas uma vez.

CVE-2026-28551MEDIUMRace condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect avaiEPSS 0.1%CVE-2026-58716MEDIUMIn multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privEPSS 0.1%CVE-2025-48577HIGHIn multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local EPSS 0.1%CVE-2018-9461HIGHIn onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race conditioEPSS 0.1%CVE-2025-31944MEDIUMRace condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with EPSS 0.1%CVE-2025-48568HIGHIn multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with EPSS 0.1%CVE-2025-58303HIGHUAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2026-0295MEDIUMGlobalProtect App: Local Privilege Escalation via Race Condition on macOSEPSS 0.1%CVE-2025-58296HIGHRace condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability.EPSS 0.1%CVE-2025-20765MEDIUMIn aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor hasEPSS 0.1%CVE-2021-39660HIGHIn TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalEPSS 0.1%CVE-2024-34732HIGHIn RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalatEPSS 0.1%CVE-2025-68962MEDIUMMulti-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aEPSS 0.1%CVE-2025-58316HIGHDoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2026-24930HIGHUAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-64313MEDIUMDenial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2026-56964MEDIUMIn multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with SysEPSS 0.1%CVE-2026-56988MEDIUMIn multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation oEPSS 0.1%CVE-2025-58313MEDIUMRace condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cause feature exceptionEPSS 0.1%CVE-2026-56923MEDIUMIn handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalationEPSS 0.1%