Fallos del tipo CWE-367

680 resultados

Condição de corrida entre verificação e uso (TOCTOU)

Ocorre quando o código verifica uma condição (ex: permissão de arquivo, saldo bancário) e depois usa o recurso, mas entre a verificação e o uso algo muda. Um atacante explora essa janela de tempo para alterar o estado, burlar a validação e executar operações não autorizadas.

Ejemplo

Um processo verifica se tem permissão de leitura em um arquivo, mas antes de ler, um outro processo muda o arquivo de lugar ou altera suas permissões. O primeiro processo tenta ler o que acredita ser o arquivo autorizado, mas na verdade acessa outro recurso.

Cómo mitigar

Use operações atômicas que combinam verificação e acesso em um único passo (ex: abrir arquivo com flags específicas). Em transações, implemente locks ou mecanismos de sincronização para evitar mudanças entre a validação e execução da ação.

CVE-2026-54055MEDIUMKitty has an Arbitrary File Write via Symlink Race Condition in File Transmission ProtocolEPSS 0.1%CVE-2025-52532LOWA race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmdEPSS 0.1%CVE-2026-16935HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2022-33691MEDIUMA possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to interleave malicious opEPSS 0.1%CVE-2026-16927HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2026-18567MEDIUMIBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]EPSS 0.1%CVE-2026-45197LOWGPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSetEPSS 0.1%CVE-2023-44128MEDIUMLGInstallService - Deletion of arbitrary files with system privilegeEPSS 0.1%CVE-2023-20623MEDIUMIn ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additiEPSS 0.1%CVE-2025-21473HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in Camera_LinuxEPSS 0.1%CVE-2025-27076HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in DisplayEPSS 0.1%CVE-2025-47332MEDIUMTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverEPSS 0.1%CVE-2025-47344MEDIUMTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverEPSS 0.1%CVE-2026-58716MEDIUMIn multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privEPSS 0.1%CVE-2026-20438MEDIUMIn MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actEPSS 0.1%CVE-2026-28671LOWIn updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local infoEPSS 0.1%CVE-2025-59610MEDIUMTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverEPSS 0.1%CVE-2025-47407HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceEPSS 0.1%CVE-2026-25278HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNXEPSS 0.1%CVE-2026-25260HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceEPSS 0.1%