Falhas do tipo CWE-367

799 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2025-20074HIGHTime-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite software installers before version 40.24.11210 mayEPSS 0.1%CVE-2022-32954HIGHAn issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the SdMmcDevice buffer used by SMM and non-SMM code EPSS 0.1%CVE-2022-32474HIGHAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the StorageSecurityCommandDxe shared buffer used by EPSS 0.1%CVE-2026-112935MEDIUMfilelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holdersEPSS 0.1%CVE-2025-31146MEDIUMTime-of-check time-of-use race condition for some Intel Ethernet Adapter Complete Driver Pack software before version 1.5.1.0 within Ring 3:EPSS 0.1%CVE-2025-13818HIGHLocal privilege escalation in ESET Management Agent for WindowsEPSS 0.1%CVE-2026-112941LOWfilelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lockEPSS 0.1%CVE-2023-34046MEDIUMVMware Fusion TOCTOU local privilege escalation vulnerabilityEPSS 0.1%CVE-2026-23554HIGHUse after free of paging structures in EPTEPSS 0.1%CVE-2024-22185HIGHTime-of-check Time-of-use Race Condition in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to potentially enable esEPSS 0.1%CVE-2024-53694HIGHQVPN Device Client, Qsync, Qfinder ProEPSS 0.1%CVE-2026-20474MEDIUMIn display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicEPSS 0.1%CVE-2022-3702MEDIUM A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local aEPSS 0.1%CVE-2022-3701HIGH A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow aEPSS 0.1%CVE-2026-22701MEDIUMfilelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLockEPSS 0.1%CVE-2026-82429HIGHApache Storm Worker Launcher: Local Privilege Escalation to Root via a Time-of-Check Race in the Worker LauncherEPSS 0.1%CVE-2025-42701MEDIUMCrowdStrike Falcon Sensor for Windows Race ConditionEPSS 0.1%CVE-2026-35359MEDIUMuutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink SwapEPSS 0.1%CVE-2026-45203HIGHGPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial check, TOCTOUEPSS 0.1%CVE-2026-78422HIGHzbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UIDEPSS 0.1%