Falhas do tipo CWE-367

680 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2026-35345MEDIUMuutils coreutils tail Privileged Information Disclosure via Symlink Replacement RaceEPSS 0.1%CVE-2025-20740MEDIUMIn wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with UseEPSS 0.1%CVE-2022-27834LOWUse after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform EPSS 0.1%CVE-2025-20037MEDIUMTime-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allow a privileged user EPSS 0.1%CVE-2026-27545MEDIUMOpenClaw < 2026.2.26 - Approval Bypass via Parent Symlink Current Working Directory RebindEPSS 0.1%CVE-2026-20474MEDIUMIn display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicEPSS 0.1%CVE-2024-43067HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in CameraEPSS 0.1%CVE-2026-54327LOWPi: Race condition in auth.json writes could expose stored credentialsEPSS 0.1%CVE-2026-87554HIGHRace condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outsidEPSS 0.1%CVE-2026-35357MEDIUMuutils coreutils cp Information Disclosure via Permission Handling RaceEPSS 0.1%CVE-2026-35354MEDIUMuutils coreutils mv Security Xattr TOCTOU Race in Cross-DeviceEPSS 0.1%CVE-2026-31997MEDIUMOpenClaw < 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run ApprovalsEPSS 0.1%CVE-2026-41360MEDIUMOpenClaw < 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script BindingEPSS 0.1%CVE-2026-35364MEDIUMuutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race ConditionEPSS 0.1%CVE-2026-79057HIGHRace condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to poteEPSS 0.1%CVE-2025-64457MEDIUMIn JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race conditionEPSS 0.1%CVE-2026-78422HIGHzbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UIDEPSS 0.1%CVE-2026-64846LOWNix: Arbitrary file truncation outside the sandbox with recursive-nix experimental featureEPSS 0.1%CVE-2026-25704MEDIUMIncomplete privilege drop for com.system76.CosmicGreeter.GetUserDataEPSS 0.1%CVE-2026-35376MEDIUMuutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race ConditionEPSS 0.1%