Falhas do tipo CWE-367

680 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2024-5558MEDIUMCWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause escalation of privileges when an attacker aEPSS 0.1%CVE-2026-35356MEDIUMuutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink RaceEPSS 0.1%CVE-2025-58131MEDIUMZoom Workplace VDI Plugin macOS Universal installer for VMware Horizon - Race ConditionEPSS 0.1%CVE-2026-41568MEDIUMMoby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapEPSS 0.1%CVE-2026-28689MEDIUMImageMagick has a Path Policy TOCTOU symlink race bypassEPSS 0.1%CVE-2026-32602MEDIUMHomarr has a Race Condition in Invite Token Registration (TOCTOU)EPSS 0.1%CVE-2025-34290HIGHVersa SASE Client for Windows < 7.9.5 Arbitrary Folder Deletion Leading to Local Privilege EscalationEPSS 0.1%CVE-2025-9810MEDIUMTOCTOU race in Linenoise enables arbitrary file overwrite and permission changesEPSS 0.1%CVE-2026-48983MEDIUMpam_usb: TOCTOU race condition in pad directory creation allows symlink substitutionEPSS 0.1%CVE-2026-79994HIGHDocker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink raceEPSS 0.1%CVE-2026-34596MEDIUMSandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installationEPSS 0.1%CVE-2026-35359MEDIUMuutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink SwapEPSS 0.1%CVE-2026-70597MEDIUMElectron: Parent process code-sign check is spoofableEPSS 0.1%CVE-2022-3700MEDIUMA Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier thatEPSS 0.1%CVE-2024-53289HIGHDell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local acEPSS 0.1%CVE-2026-46227HIGHsctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALLEPSS 0.1%CVE-2026-42306HIGHMoby: Race condition in docker cp allows bind mount redirection to host pathEPSS 0.1%CVE-2023-31324HIGHA Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global MemoEPSS 0.1%CVE-2025-2425MEDIUMTOCTOU race condition vulnerability in ESET products on WindowsEPSS 0.1%CVE-2023-20548HIGHA Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting inEPSS 0.1%