Fallos del tipo CWE-367

799 resultados

Condição de corrida entre verificação e uso (TOCTOU)

Ocorre quando o código verifica uma condição (ex: permissão de arquivo, saldo bancário) e depois usa o recurso, mas entre a verificação e o uso algo muda. Um atacante explora essa janela de tempo para alterar o estado, burlar a validação e executar operações não autorizadas.

Ejemplo

Um processo verifica se tem permissão de leitura em um arquivo, mas antes de ler, um outro processo muda o arquivo de lugar ou altera suas permissões. O primeiro processo tenta ler o que acredita ser o arquivo autorizado, mas na verdade acessa outro recurso.

Cómo mitigar

Use operações atômicas que combinam verificação e acesso em um único passo (ex: abrir arquivo com flags específicas). Em transações, implemente locks ou mecanismos de sincronização para evitar mudanças entre a validação e execução da ação.

CVE-2025-29969HIGHMS-EVEN RPC Remote Code Execution VulnerabilityEPSS 1.2%CVE-2026-119977HIGHWordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code ExecutionEPSS 1.2%KEVCVE-2023-29337HIGHNuGet Client Remote Code Execution VulnerabilityEPSS 1.1%CVE-2021-46853MEDIUMAlpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.EPSS 1.1%CVE-2023-21555HIGHWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-32093HIGHWindows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2024-41787CRITICALIBM Engineering Requirements Management DOORS Next code executionEPSS 1.1%CVE-2026-53822HIGHOpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and ExecutionEPSS 1.1%CVE-2018-16872MEDIUMA flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and direEPSS 1.1%CVE-2024-28718CRITICALAn issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.EPSS 1.1%CVE-2013-3888HIGHdxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local usEPSS 1.0%CVE-2026-109518HIGHAPT RCE via hard link reuseEPSS 0.9%CVE-2021-3054HIGHPAN-OS: Unsigned Code Execution During Plugin Installation Race Condition VulnerabilityEPSS 0.9%CVE-2026-19118HIGHRace condition vulnerability was identified in GitHub Enterprise Server that allowed remote code executionEPSS 0.9%CVE-2024-48322HIGHUsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.EPSS 0.9%CVE-2024-38186HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-41779CRITICALIBM Engineering Systems Design Rhapsody - Model ManagerEPSS 0.8%CVE-2023-23520MEDIUMA race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iEPSS 0.8%CVE-2020-13162HIGHA time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for WindoEPSS 0.8%CVE-2023-33154HIGHWindows Partition Management Driver Elevation of Privilege VulnerabilityEPSS 0.8%