Weaknesses of type CWE-367

680 results

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: permissão, existência de arquivo) e depois usa o recurso baseado naquela verificação, mas entre os dois momentos outro processo pode mudar o estado do recurso. O atacante explora a janela de tempo para alterar o que foi verificado, contornando a validação.

Example

Um programa verifica se um arquivo existe e tem permissão de leitura, depois o abre para processar. Entre a verificação e a abertura, um atacante pode trocar o arquivo por um link simbólico apontando para um arquivo sensível do sistema. O programa abre o link sem perceber a mudança.

How to mitigate

Use operações atômicas que combinam verificação e uso em uma única chamada de sistema (ex: open() com flags exclusivas, fstat() após abrir arquivo). Em casos de acesso a dados compartilhados, implemente locks ou transações que impeçam alterações entre a validação e o uso do recurso.

CVE-2026-41702HIGHTOCTOU local privilege escalation vulnerabilityEPSS 0.1%CVE-2026-14160MEDIUMTime-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allows Leveraging Race Conditions. This issEPSS 0.1%CVE-2026-20445MEDIUMIn MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has alreaEPSS 0.1%CVE-2025-31146MEDIUMTime-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3:EPSS 0.1%CVE-2025-42701MEDIUMCrowdStrike Falcon Sensor for Windows Race ConditionEPSS 0.1%CVE-2026-7791HIGHImproper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows beforeEPSS 0.1%CVE-2024-27134HIGHExcessive directory permissions in MLflow leads to local privilege escalation when using spark_udfEPSS 0.1%CVE-2022-3701HIGH A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow aEPSS 0.1%CVE-2022-3702MEDIUM A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local aEPSS 0.1%CVE-2026-35355MEDIUMuutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU RaceEPSS 0.1%CVE-2026-27456MEDIUMutil-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device SetupEPSS 0.1%CVE-2022-27540HIGHA potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might aEPSS 0.1%CVE-2025-27812HIGHMSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation.EPSS 0.1%CVE-2026-54777MEDIUMCoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instanceEPSS 0.1%CVE-2026-54575MEDIUMmport package fetch and clean paths are vulnerable to TOCTOU filesystem racesEPSS 0.1%CVE-2024-42444HIGHTOCTOU Race Condition between DMA and SMMEPSS 0.1%CVE-2026-27189MEDIUMOpenSift: Race-prone local persistence could cause state corruption/lossEPSS 0.1%CVE-2023-20578HIGHA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify EPSS 0.1%CVE-2024-54084HIGHSMM Arbitrary Write via TOCTOU VulnerabilityEPSS 0.1%CVE-2026-15449MEDIUMTOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruptionEPSS 0.1%