Falhas do tipo CWE-367

795 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2026-49114MEDIUMONNX symlink-following and path-traversal arbitrary file writeEPSS 0.2%CVE-2022-33984HIGHDMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOEPSS 0.2%CVE-2022-33907MEDIUMDMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corrupEPSS 0.2%CVE-2022-33982MEDIUMDMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and leEPSS 0.2%CVE-2022-33906MEDIUMDMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption througEPSS 0.2%CVE-2026-85920HIGHWindows BitLocker Elevation of Privilege VulnerabilityEPSS 0.2%CVE-2026-27456MEDIUMutil-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device SetupEPSS 0.2%CVE-2026-100713HIGHFroxlor before 2.3.12 Privilege Escalation via SSH Key SyncEPSS 0.2%CVE-2022-30774MEDIUMDMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before EPSS 0.2%CVE-2022-31243MEDIUMUpdate description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesREPSS 0.2%CVE-2026-24071HIGHXPC Client Validation via PID leading to Local Privilege Escalation in Native Instruments Native AccessEPSS 0.2%CVE-2024-47813LOWWasmtime race condition could lead to WebAssembly control-flow integrity and type safety violationsEPSS 0.2%CVE-2022-21198HIGHTime-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enableEPSS 0.2%CVE-2025-61037HIGHA local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-of-Check Time-of-UseEPSS 0.2%CVE-2026-29518HIGHRsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File WriteEPSS 0.2%CVE-2026-53612HIGHutil-linux mount hook_owner TOCTOU allows local privilege escalationEPSS 0.2%CVE-2026-3590MEDIUMRace Condition in Guest Magic Link Authentication Allows Token ReuseEPSS 0.2%CVE-2025-68404HIGHvcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interfaceEPSS 0.2%CVE-2026-121245MEDIUMRace condition in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially obtain sensitive information viaEPSS 0.1%CVE-2026-42344MEDIUMFastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpointsEPSS 0.1%