Falhas do tipo CWE-367

799 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2022-34899HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacEPSS 0.2%CVE-2026-123207LOWLibreTV before v2.21.2 SSRF Protection Bypass via DNS RebindingEPSS 0.2%CVE-2026-87523MEDIUMRace condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain senEPSS 0.2%CVE-2026-106412HIGHRace condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process EPSS 0.2%CVE-2026-7837LOWTOCTOU with root privilege in ad_flushEPSS 0.2%CVE-2026-79417MEDIUMImproper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass EPSS 0.2%CVE-2026-105647MEDIUMGhost: Server-Side Request Forgery in Bookmark FetchingEPSS 0.2%CVE-2026-44694HIGHn8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client pathsEPSS 0.2%CVE-2026-83510HIGHWindows Setup Files Cleanup Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-96853MEDIUMWindows Win32 Kernel Subsystem Information Disclosure VulnerabilityEPSS 0.2%CVE-2026-119552MEDIUMUptime Kuma through 2.5.8 Race Condition Admin Creation via Setup HandlerEPSS 0.2%CVE-2025-54667MEDIUMWordPress myCred plugin <= 2.9.4.3 - Race Condition VulnerabilityEPSS 0.2%CVE-2026-56178MEDIUMMicrosoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2011-10035HIGHNagios XI < 2011R1.9 Race Conditions in Crontab Install Scripts LPEEPSS 0.2%CVE-2024-13942HIGHRockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privilegesEPSS 0.2%CVE-2026-91744MEDIUMRace condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the reEPSS 0.2%CVE-2026-79968MEDIUMDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check TimeEPSS 0.2%CVE-2020-8332MEDIUMA potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x serveEPSS 0.2%CVE-2026-53838MEDIUMOpenClaw < 2026.5.27 - Node Pairing State Mutation via ReconnectionEPSS 0.2%CVE-2025-55696HIGHNtQueryInformation Token function (ntifs.h) Elevation of Privilege VulnerabilityEPSS 0.2%