Weaknesses of type CWE-367

682 results

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: permissão, existência de arquivo) e depois usa o recurso baseado naquela verificação, mas entre os dois momentos outro processo pode mudar o estado do recurso. O atacante explora a janela de tempo para alterar o que foi verificado, contornando a validação.

Example

Um programa verifica se um arquivo existe e tem permissão de leitura, depois o abre para processar. Entre a verificação e a abertura, um atacante pode trocar o arquivo por um link simbólico apontando para um arquivo sensível do sistema. O programa abre o link sem perceber a mudança.

How to mitigate

Use operações atômicas que combinam verificação e uso em uma única chamada de sistema (ex: open() com flags exclusivas, fstat() após abrir arquivo). Em casos de acesso a dados compartilhados, implemente locks ou transações que impeçam alterações entre a validação e o uso do recurso.

CVE-2026-35345MEDIUMuutils coreutils tail Privileged Information Disclosure via Symlink Replacement RaceEPSS 0.1%CVE-2026-35360MEDIUMuutils coreutils touch Arbitrary File Truncation via TOCTOU Race ConditionEPSS 0.1%CVE-2026-16896HIGHIBM i is Affected By Multiple Vulnerabilities in Network Authentication ServiceEPSS 0.1%CVE-2026-87457HIGHRace condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside tEPSS 0.1%CVE-2026-42306HIGHMoby: Race condition in docker cp allows bind mount redirection to host pathEPSS 0.1%CVE-2026-80047HIGHHugging Face Transformers library writes remote code to disk prior to consent checkEPSS 0.1%CVE-2026-53145HIGHdrm/gem: Try to fix change_handle ioctl, attempt 4EPSS 0.1%CVE-2024-0171MEDIUMDell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vEPSS 0.1%CVE-2026-41568MEDIUMMoby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapEPSS 0.1%CVE-2026-16838HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2025-23279HIGHNVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A EPSS 0.1%CVE-2026-25704MEDIUMIncomplete privilege drop for com.system76.CosmicGreeter.GetUserDataEPSS 0.1%CVE-2026-53410HIGHZoom Clients for Windows - Race ConditionEPSS 0.1%CVE-2025-8192MEDIUMRace condition in AndroidTV TvSettingsEPSS 0.1%CVE-2026-35364MEDIUMuutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race ConditionEPSS 0.1%CVE-2022-32638MEDIUMIn isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System executEPSS 0.1%CVE-2025-20037MEDIUMTime-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allow a privileged user EPSS 0.1%CVE-2026-54055MEDIUMKitty has an Arbitrary File Write via Symlink Race Condition in File Transmission ProtocolEPSS 0.1%CVE-2022-27834LOWUse after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform EPSS 0.1%CVE-2025-20740MEDIUMIn wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with UseEPSS 0.1%