Fallos del tipo CWE-367

799 resultados

Condição de corrida entre verificação e uso (TOCTOU)

Ocorre quando o código verifica uma condição (ex: permissão de arquivo, saldo bancário) e depois usa o recurso, mas entre a verificação e o uso algo muda. Um atacante explora essa janela de tempo para alterar o estado, burlar a validação e executar operações não autorizadas.

Ejemplo

Um processo verifica se tem permissão de leitura em um arquivo, mas antes de ler, um outro processo muda o arquivo de lugar ou altera suas permissões. O primeiro processo tenta ler o que acredita ser o arquivo autorizado, mas na verdade acessa outro recurso.

Cómo mitigar

Use operações atômicas que combinam verificação e acesso em um único passo (ex: abrir arquivo com flags específicas). Em transações, implemente locks ou mecanismos de sincronização para evitar mudanças entre a validação e execução da ação.

CVE-2026-113103HIGHRace condition in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and EPSS 0.3%CVE-2024-28137HIGHPHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series EPSS 0.3%CVE-2026-54020MEDIUMOpen WebUI: DNS Rebinding SSRF BypassEPSS 0.3%CVE-2026-91743HIGHRace condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentiEPSS 0.3%CVE-2026-116240HIGHpgAdmin 4: File Manager and storage-path tools act on a different path from the one checkedEPSS 0.3%CVE-2026-103435HIGHArbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude CodeEPSS 0.3%CVE-2026-7724LOWPrefectHQ prefect Webhook/Notification validate_restricted_url toctouEPSS 0.3%CVE-2020-14375—A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a regionEPSS 0.3%CVE-2025-13032CRITICALDouble fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overfloEPSS 0.2%CVE-2024-0133MEDIUMNVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container EPSS 0.2%CVE-2026-44113HIGHOpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS BridgeEPSS 0.2%CVE-2026-113112HIGHRace condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass systeEPSS 0.2%CVE-2026-113333MEDIUMRace condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass systeEPSS 0.2%CVE-2026-113064HIGHRace condition in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crEPSS 0.2%CVE-2026-108698HIGHhyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race ConditionEPSS 0.2%CVE-2022-23084HIGHPotential jail escape vulnerabilities in netmapEPSS 0.2%CVE-2024-43882HIGHexec: Fix ToCToU between perm check and set-uid/gid usageEPSS 0.2%CVE-2026-55524HIGHPraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)EPSS 0.2%CVE-2025-53788HIGHWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-57569LOWLychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validationEPSS 0.2%