Falhas do tipo CWE-362

1.090 resultados

Condição de corrida

Ocorre quando dois ou mais threads/processos acessam um recurso compartilhado (arquivo, memória, banco de dados) quase simultaneamente, e o resultado final depende da ordem de execução que não é controlada. Se a sincronização falha, um thread pode ler ou modificar dados enquanto outro está no meio da operação, causando inconsistência ou comportamento imprevisto.

Exemplo

Um sistema de autenticação que verifica se um arquivo de token existe (sem estar sincronizado): thread A verifica que o arquivo não existe no instante T1, thread B cria o token no instante T2, mas thread A já passou da verificação e cria um novo token conflitante em T3. O resultado depende do timing, não da lógica.

Como mitigar

Use mecanismos de sincronização (locks, mutexes, operações atômicas) ao acessar recursos compartilhados, ou redesenhe a lógica para evitar compartilhamento (cada thread com seu espaço). Para operações de arquivo, use flags de criação exclusiva (O_EXCL em Unix) em vez de verificar-depois-criar.

CVE-2026-13905MEDIUMRace in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information fEPSS 0.1%CVE-2026-28543MEDIUMRace condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect avaEPSS 0.1%CVE-2025-68960HIGHMulti-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect avEPSS 0.1%CVE-2026-34857MEDIUMUAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-22830HIGHSmiFlash Race Condition VulnerabilityEPSS 0.1%CVE-2022-32645MEDIUMIn vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execEPSS 0.1%CVE-2025-52515MEDIUMAn issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race cEPSS 0.1%CVE-2023-53447MEDIUMf2fs: don't reset unchangable mount option in f2fs_remount()EPSS 0.1%CVE-2023-53329MEDIUMworkqueue: fix data race with the pwq->stats[] incrementEPSS 0.1%CVE-2026-34858MEDIUMUAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2026-24199MEDIUMNVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compileEPSS 0.1%CVE-2025-68961MEDIUMMulti-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aEPSS 0.1%CVE-2024-32908HIGHIn sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of priviEPSS 0.1%CVE-2024-54122MEDIUMConcurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availabilityEPSS 0.1%CVE-2026-19139HIGHRace in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalaEPSS 0.1%CVE-2026-17993HIGHRace in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious EPSS 0.1%CVE-2026-58848HIGHIn multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalEPSS 0.1%CVE-2026-34861MEDIUMRace condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availabilityEPSS 0.1%CVE-2026-34862MEDIUMRace condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect avEPSS 0.1%CVE-2025-48533HIGHIn multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This coulEPSS 0.1%