Falhas do tipo CWE-362

1.089 resultados

Condição de corrida

Ocorre quando dois ou mais threads/processos acessam um recurso compartilhado (arquivo, memória, banco de dados) quase simultaneamente, e o resultado final depende da ordem de execução que não é controlada. Se a sincronização falha, um thread pode ler ou modificar dados enquanto outro está no meio da operação, causando inconsistência ou comportamento imprevisto.

Exemplo

Um sistema de autenticação que verifica se um arquivo de token existe (sem estar sincronizado): thread A verifica que o arquivo não existe no instante T1, thread B cria o token no instante T2, mas thread A já passou da verificação e cria um novo token conflitante em T3. O resultado depende do timing, não da lógica.

Como mitigar

Use mecanismos de sincronização (locks, mutexes, operações atômicas) ao acessar recursos compartilhados, ou redesenhe a lógica para evitar compartilhamento (cada thread com seu espaço). Para operações de arquivo, use flags de criação exclusiva (O_EXCL em Unix) em vez de verificar-depois-criar.

CVE-2023-53020MEDIUMl2tp: close all race conditions in l2tp_tunnel_register()EPSS 0.1%CVE-2024-46971HIGHGPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systemsEPSS 0.1%CVE-2024-47892HIGHGPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)EPSS 0.1%CVE-2026-26071MEDIUMEVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑FreeEPSS 0.1%CVE-2026-26072MEDIUMEVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_mapEPSS 0.1%CVE-2025-20104MEDIUMRace condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user tEPSS 0.1%CVE-2024-54102MEDIUMRace condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.EPSS 0.1%CVE-2026-71968HIGHOP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENTEPSS 0.1%CVE-2023-53345MEDIUMrxrpc: Fix potential data race in rxrpc_wait_to_be_connected()EPSS 0.1%CVE-2024-32993MEDIUMOut-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%CVE-2026-92628LOWConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLabEPSS 0.1%CVE-2026-28891HIGHA race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.EPSS 0.1%CVE-2026-28817HIGHA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 2EPSS 0.1%CVE-2026-9040HIGHMali GPU Kernel Driver allows denial of service or disclosure of sensitive informationEPSS 0.1%CVE-2024-32997HIGHRace condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.EPSS 0.1%CVE-2026-84507HIGHA race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS GoEPSS 0.1%CVE-2025-61792MEDIUMQuadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, EPSS 0.1%CVE-2025-43420MEDIUMA race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 2EPSS 0.1%CVE-2023-53368MEDIUMtracing: Fix race issue between cpu buffer write and swapEPSS 0.1%CVE-2023-28142MEDIUMRace ConditionEPSS 0.1%