Weaknesses of type CWE-367

680 results

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: permissão, existência de arquivo) e depois usa o recurso baseado naquela verificação, mas entre os dois momentos outro processo pode mudar o estado do recurso. O atacante explora a janela de tempo para alterar o que foi verificado, contornando a validação.

Example

Um programa verifica se um arquivo existe e tem permissão de leitura, depois o abre para processar. Entre a verificação e a abertura, um atacante pode trocar o arquivo por um link simbólico apontando para um arquivo sensível do sistema. O programa abre o link sem perceber a mudança.

How to mitigate

Use operações atômicas que combinam verificação e uso em uma única chamada de sistema (ex: open() com flags exclusivas, fstat() após abrir arquivo). Em casos de acesso a dados compartilhados, implemente locks ou transações que impeçam alterações entre a validação e o uso do recurso.

CVE-2023-29337HIGHNuGet Client Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-32093HIGHWindows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2024-41787CRITICALIBM Engineering Requirements Management DOORS Next code executionEPSS 1.1%CVE-2023-21555HIGHWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2020-8562LOWBypass of Kubernetes API Server proxy TOCTOUEPSS 1.1%CVE-2026-53822HIGHOpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and ExecutionEPSS 1.1%CVE-2018-16872MEDIUMA flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and direEPSS 1.1%CVE-2024-28718CRITICALAn issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.EPSS 1.1%CVE-2013-3888HIGHdxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local usEPSS 1.0%CVE-2021-3054HIGHPAN-OS: Unsigned Code Execution During Plugin Installation Race Condition VulnerabilityEPSS 0.9%CVE-2021-46853MEDIUMAlpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.EPSS 0.9%CVE-2024-48322HIGHUsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.EPSS 0.9%CVE-2024-38186HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-41779CRITICALIBM Engineering Systems Design Rhapsody - Model ManagerEPSS 0.8%CVE-2023-23520MEDIUMA race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iEPSS 0.8%CVE-2026-21523HIGHGitHub Copilot and Visual Studio Code Remote Code Execution VulnerabilityEPSS 0.8%CVE-2020-13162HIGHA time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for WindoEPSS 0.8%CVE-2023-33154HIGHWindows Partition Management Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-29062HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 0.7%CVE-2022-23029—On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when aEPSS 0.7%