Falhas do tipo CWE-362

1.090 resultados

Condição de corrida

Ocorre quando dois ou mais threads/processos acessam um recurso compartilhado (arquivo, memória, banco de dados) quase simultaneamente, e o resultado final depende da ordem de execução que não é controlada. Se a sincronização falha, um thread pode ler ou modificar dados enquanto outro está no meio da operação, causando inconsistência ou comportamento imprevisto.

Exemplo

Um sistema de autenticação que verifica se um arquivo de token existe (sem estar sincronizado): thread A verifica que o arquivo não existe no instante T1, thread B cria o token no instante T2, mas thread A já passou da verificação e cria um novo token conflitante em T3. O resultado depende do timing, não da lógica.

Como mitigar

Use mecanismos de sincronização (locks, mutexes, operações atômicas) ao acessar recursos compartilhados, ou redesenhe a lógica para evitar compartilhamento (cada thread com seu espaço). Para operações de arquivo, use flags de criação exclusiva (O_EXCL em Unix) em vez de verificar-depois-criar.

CVE-2026-28551MEDIUMRace condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect avaiEPSS 0.1%CVE-2026-58716MEDIUMIn multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privEPSS 0.1%CVE-2025-31944MEDIUMRace condition for some TDX Module before version tdx1.5 within Ring 0: Hypervisor may allow a denial of service. Authorized adversary with EPSS 0.1%CVE-2018-9461HIGHIn onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race conditioEPSS 0.1%CVE-2025-58303HIGHUAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-48577HIGHIn multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local EPSS 0.1%CVE-2025-48568HIGHIn multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with EPSS 0.1%CVE-2026-0295MEDIUMGlobalProtect App: Local Privilege Escalation via Race Condition on macOSEPSS 0.1%CVE-2025-20765MEDIUMIn aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor hasEPSS 0.1%CVE-2021-39660HIGHIn TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalEPSS 0.1%CVE-2025-58296HIGHRace condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect function stability.EPSS 0.1%CVE-2024-34732HIGHIn RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalatEPSS 0.1%CVE-2025-68962MEDIUMMulti-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aEPSS 0.1%CVE-2025-64313MEDIUMDenial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2025-58316HIGHDoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2026-24930HIGHUAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%CVE-2026-56915MEDIUMIn bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation ofEPSS 0.1%CVE-2026-56988MEDIUMIn multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation oEPSS 0.1%CVE-2025-58313MEDIUMRace condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cause feature exceptionEPSS 0.1%CVE-2026-56923MEDIUMIn handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalationEPSS 0.1%