Falhas do tipo CWE-367

799 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2025-29969HIGHMS-EVEN RPC Remote Code Execution VulnerabilityEPSS 1.2%CVE-2026-119977HIGHWordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code ExecutionEPSS 1.2%KEVCVE-2023-29337HIGHNuGet Client Remote Code Execution VulnerabilityEPSS 1.1%CVE-2021-46853MEDIUMAlpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.EPSS 1.1%CVE-2023-21555HIGHWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-32093HIGHWindows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2024-41787CRITICALIBM Engineering Requirements Management DOORS Next code executionEPSS 1.1%CVE-2026-53822HIGHOpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and ExecutionEPSS 1.1%CVE-2018-16872MEDIUMA flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and direEPSS 1.1%CVE-2024-28718CRITICALAn issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.EPSS 1.1%CVE-2013-3888HIGHdxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local usEPSS 1.0%CVE-2026-109518HIGHAPT RCE via hard link reuseEPSS 0.9%CVE-2021-3054HIGHPAN-OS: Unsigned Code Execution During Plugin Installation Race Condition VulnerabilityEPSS 0.9%CVE-2026-19118HIGHRace condition vulnerability was identified in GitHub Enterprise Server that allowed remote code executionEPSS 0.9%CVE-2024-48322HIGHUsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.EPSS 0.9%CVE-2024-38186HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-41779CRITICALIBM Engineering Systems Design Rhapsody - Model ManagerEPSS 0.8%CVE-2023-23520MEDIUMA race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iEPSS 0.8%CVE-2020-13162HIGHA time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for WindoEPSS 0.8%CVE-2023-33154HIGHWindows Partition Management Driver Elevation of Privilege VulnerabilityEPSS 0.8%