Falhas do tipo CWE-367
799 resultadosCondição de corrida entre verificação e uso (TOCTOU)
A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.
Exemplo
Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.
Como mitigar
Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.
CVE-2022-33909HIGHDMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TOEPSS 0.1%CVE-2026-24191HIGHNVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful expEPSS 0.1%CVE-2022-31637HIGHPotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allEPSS 0.1%CVE-2022-27541HIGHPotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allEPSS 0.1%CVE-2026-20445MEDIUMIn MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has alreaEPSS 0.1%CVE-2024-37181LOWTime-of-check time-of-use race condition in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to EPSS 0.1%CVE-2022-31636HIGHPotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allEPSS 0.1%CVE-2022-31638HIGHPotential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allEPSS 0.1%CVE-2022-27538HIGHA potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow aEPSS 0.1%CVE-2022-27539HIGHPotential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allEPSS 0.1%CVE-2024-39821MEDIUMZoom Workplace App for Windows and Zoom Rooms App for Windows - Race ConditionEPSS 0.1%CVE-2025-58151CRITICALvarstored: TOCTOU issues with mapped guest memoryEPSS 0.1%CVE-2022-30773MEDIUMDMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but beforEPSS 0.1%CVE-2022-32267MEDIUMDMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU EPSS 0.1%CVE-2022-33905HIGHDMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU attEPSS 0.1%CVE-2026-82430HIGHApache Storm Worker Launcher: Local Privilege Escalation to Root via Container Command Files Chowned to the TenantEPSS 0.1%CVE-2024-21792MEDIUMTime-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2.5.0 may allow an authenticated user to poteEPSS 0.1%CVE-2026-53145HIGHdrm/gem: Try to fix change_handle ioctl, attempt 4EPSS 0.1%CVE-2026-45619MEDIUMAVideo CVE-2026-43884 incomplete fix - `isSSRFSafeURL()` call sites still discard the `$resolvedIP` out-param at master HEAD postEPSS 0.1%CVE-2022-43779HIGHA potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (systeEPSS 0.1%