Falhas do tipo CWE-367

799 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2026-113103HIGHRace condition in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and EPSS 0.3%CVE-2026-91743HIGHRace condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentiEPSS 0.3%CVE-2026-54020MEDIUMOpen WebUI: DNS Rebinding SSRF BypassEPSS 0.3%CVE-2026-116240HIGHpgAdmin 4: File Manager and storage-path tools act on a different path from the one checkedEPSS 0.3%CVE-2024-28137HIGHPHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series EPSS 0.3%CVE-2026-103435HIGHArbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude CodeEPSS 0.3%CVE-2020-14375—A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a regionEPSS 0.3%CVE-2026-7724LOWPrefectHQ prefect Webhook/Notification validate_restricted_url toctouEPSS 0.3%CVE-2025-13032CRITICALDouble fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overfloEPSS 0.2%CVE-2024-0133MEDIUMNVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container EPSS 0.2%CVE-2026-44113HIGHOpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS BridgeEPSS 0.2%CVE-2026-113112HIGHRace condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass systeEPSS 0.2%CVE-2026-113333MEDIUMRace condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass systeEPSS 0.2%CVE-2026-113064HIGHRace condition in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crEPSS 0.2%CVE-2026-108698HIGHhyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race ConditionEPSS 0.2%CVE-2022-23084HIGHPotential jail escape vulnerabilities in netmapEPSS 0.2%CVE-2024-43882HIGHexec: Fix ToCToU between perm check and set-uid/gid usageEPSS 0.2%CVE-2026-55524HIGHPraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)EPSS 0.2%CVE-2025-53788HIGHWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-57569LOWLychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validationEPSS 0.2%