Fallos del tipo CWE-367

795 resultados

Condição de corrida entre verificação e uso (TOCTOU)

Ocorre quando o código verifica uma condição (ex: permissão de arquivo, saldo bancário) e depois usa o recurso, mas entre a verificação e o uso algo muda. Um atacante explora essa janela de tempo para alterar o estado, burlar a validação e executar operações não autorizadas.

Ejemplo

Um processo verifica se tem permissão de leitura em um arquivo, mas antes de ler, um outro processo muda o arquivo de lugar ou altera suas permissões. O primeiro processo tenta ler o que acredita ser o arquivo autorizado, mas na verdade acessa outro recurso.

Cómo mitigar

Use operações atômicas que combinam verificação e acesso em um único passo (ex: abrir arquivo com flags específicas). Em transações, implemente locks ou mecanismos de sincronização para evitar mudanças entre a validação e execução da ação.

CVE-2026-49114MEDIUMONNX symlink-following and path-traversal arbitrary file writeEPSS 0.2%CVE-2022-33984HIGHDMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOEPSS 0.2%CVE-2022-33907MEDIUMDMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corrupEPSS 0.2%CVE-2022-33982MEDIUMDMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and leEPSS 0.2%CVE-2022-33906MEDIUMDMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption througEPSS 0.2%CVE-2026-85920HIGHWindows BitLocker Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-27456MEDIUMutil-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device SetupEPSS 0.2%CVE-2026-100713HIGHFroxlor before 2.3.12 Privilege Escalation via SSH Key SyncEPSS 0.2%CVE-2022-30774MEDIUMDMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before EPSS 0.2%CVE-2022-31243MEDIUMUpdate description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesREPSS 0.2%CVE-2026-24071HIGHXPC Client Validation via PID leading to Local Privilege Escalation in Native Instruments Native AccessEPSS 0.2%CVE-2024-47813LOWWasmtime race condition could lead to WebAssembly control-flow integrity and type safety violationsEPSS 0.2%CVE-2022-21198HIGHTime-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enableEPSS 0.2%CVE-2025-61037HIGHA local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-of-Check Time-of-UseEPSS 0.2%CVE-2026-29518HIGHRsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File WriteEPSS 0.2%CVE-2026-53612HIGHutil-linux mount hook_owner TOCTOU allows local privilege escalationEPSS 0.2%CVE-2026-3590MEDIUMRace Condition in Guest Magic Link Authentication Allows Token ReuseEPSS 0.2%CVE-2025-68404HIGHvcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interfaceEPSS 0.2%CVE-2026-121245MEDIUMRace condition in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially obtain sensitive information viaEPSS 0.1%CVE-2026-42344MEDIUMFastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpointsEPSS 0.1%