Falhas do tipo CWE-367

796 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2026-83505HIGHWindows Setup Files Cleanup Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-105163MEDIUMcrossplane crossplane-runtime ImageConfig client.go Get toctouEPSS 0.3%CVE-2025-53134HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2024-51563MEDIUMbhyve(8) virtio_vq_recordon time-of-check to time-of-use raceEPSS 0.3%CVE-2026-105481MEDIUMA flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the EPSS 0.3%CVE-2026-34224LOWParse Server: MFA single-use token bypass via concurrent authData login requestsEPSS 0.3%CVE-2026-88968HIGHClaude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the WorkspaceEPSS 0.3%CVE-2026-20677CRITICALA race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iEPSS 0.3%CVE-2026-63334MEDIUMdraw.io: SSRF via DNS rebinding in ProxyServlet bypasses private IP blocklistEPSS 0.3%CVE-2026-70075MEDIUMWindows Virtualization-Based Security (VBS) Enclave Security Feature Bypass VulnerabilityEPSS 0.3%CVE-2025-62004HIGHBullWall Server Intrusion Protection (SIP) initialization race conditionEPSS 0.3%CVE-2026-55391HIGHdatamodel-code-generator vulnerable to SSRF protection bypass via DNS rebindingEPSS 0.3%CVE-2026-71539HIGHn8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code ExecutionEPSS 0.3%CVE-2026-1035LOWOrg.keycloak.protocol.oidc: keycloak refresh token reuse bypass via toctou race conditionEPSS 0.3%CVE-2022-1537HIGHfile.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in gruntjs/gruntEPSS 0.3%CVE-2025-71215HIGHA time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local aEPSS 0.3%CVE-2026-45208HIGHA time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installaEPSS 0.3%CVE-2026-77242HIGHMCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)EPSS 0.3%CVE-2026-20831HIGHWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2021-31422HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker muEPSS 0.3%