Falhas do tipo CWE-367

680 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2025-42701MEDIUMCrowdStrike Falcon Sensor for Windows Race ConditionEPSS 0.1%CVE-2025-31146MEDIUMTime-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3:EPSS 0.1%CVE-2026-7791HIGHImproper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows beforeEPSS 0.1%CVE-2026-14160MEDIUMTime-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allows Leveraging Race Conditions. This issEPSS 0.1%CVE-2026-20445MEDIUMIn MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has alreaEPSS 0.1%CVE-2026-41702HIGHTOCTOU local privilege escalation vulnerabilityEPSS 0.1%CVE-2024-27134HIGHExcessive directory permissions in MLflow leads to local privilege escalation when using spark_udfEPSS 0.1%CVE-2022-3701HIGH A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow aEPSS 0.1%CVE-2022-3702MEDIUM A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local aEPSS 0.1%CVE-2026-35355MEDIUMuutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU RaceEPSS 0.1%CVE-2022-27540HIGHA potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might aEPSS 0.1%CVE-2026-27456MEDIUMutil-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device SetupEPSS 0.1%CVE-2024-42444HIGHTOCTOU Race Condition between DMA and SMMEPSS 0.1%CVE-2026-54777MEDIUMCoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instanceEPSS 0.1%CVE-2026-54575MEDIUMmport package fetch and clean paths are vulnerable to TOCTOU filesystem racesEPSS 0.1%CVE-2025-27812HIGHMSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation.EPSS 0.1%CVE-2026-27189MEDIUMOpenSift: Race-prone local persistence could cause state corruption/lossEPSS 0.1%CVE-2026-15449MEDIUMTOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruptionEPSS 0.1%CVE-2024-54084HIGHSMM Arbitrary Write via TOCTOU VulnerabilityEPSS 0.1%CVE-2023-20578HIGHA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify EPSS 0.1%