Fallos del tipo CWE-367

799 resultados

Condição de corrida entre verificação e uso (TOCTOU)

Ocorre quando o código verifica uma condição (ex: permissão de arquivo, saldo bancário) e depois usa o recurso, mas entre a verificação e o uso algo muda. Um atacante explora essa janela de tempo para alterar o estado, burlar a validação e executar operações não autorizadas.

Ejemplo

Um processo verifica se tem permissão de leitura em um arquivo, mas antes de ler, um outro processo muda o arquivo de lugar ou altera suas permissões. O primeiro processo tenta ler o que acredita ser o arquivo autorizado, mas na verdade acessa outro recurso.

Cómo mitigar

Use operações atômicas que combinam verificação e acesso em um único passo (ex: abrir arquivo com flags específicas). Em transações, implemente locks ou mecanismos de sincronização para evitar mudanças entre a validação e execução da ação.

CVE-2026-113233HIGHRace condition in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer procEPSS 0.3%CVE-2026-77972CRITICALsafeurl validated address is not bound to the request, allowing DNS rebindingEPSS 0.3%CVE-2026-25728CRITICALClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race ConditionEPSS 0.3%CVE-2025-64180CRITICALManager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)EPSS 0.3%CVE-2026-43927MEDIUMFOSSBilling has race condition in cart checkout that bypasses promo code usage limitsEPSS 0.3%CVE-2026-25052CRITICALn8n Improper File Access Controls Allow Arbitrary File Read by Authenticated UsersEPSS 0.3%CVE-2026-79263HIGHRace condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox EPSS 0.3%CVE-2023-6690LOWA race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphEPSS 0.3%CVE-2019-7307MEDIUMApport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xmlEPSS 0.3%CVE-2025-67124MEDIUMA TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite arEPSS 0.3%CVE-2024-2913MEDIUMRace Condition Vulnerability in mintplex-labs/anything-llmEPSS 0.3%CVE-2026-34354HIGHAkamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation. The GPA serviEPSS 0.3%CVE-2026-86861MEDIUMpgAdmin 4: File Manager save_file writes through a symbolic link planted after the containment checkEPSS 0.3%CVE-2025-71216HIGHA time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate pEPSS 0.3%CVE-2026-76044HIGHRace condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentiEPSS 0.3%CVE-2026-79155HIGHRace condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to pEPSS 0.3%CVE-2026-24065HIGHLocal Privilege Escalation via Insecure XPC Client Validation in Waves Central for macOSEPSS 0.3%CVE-2026-20677CRITICALA race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iEPSS 0.3%CVE-2026-79071HIGHRace condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentiaEPSS 0.3%CVE-2026-48931LOWA flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vEPSS 0.3%