Falhas do tipo CWE-367

800 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2026-47497HIGHNVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause imprEPSS 0.1%CVE-2026-59676MEDIUMLocal File Deletion Attack Vector in rm_rf() in seunshareEPSS 0.1%CVE-2026-27545MEDIUMOpenClaw < 2026.2.26 - Approval Bypass via Parent Symlink Current Working Directory RebindEPSS 0.1%CVE-2025-44002MEDIUMArbitrary File Creation via Symbolic Link leading to Denial-of-ServiceEPSS 0.1%CVE-2026-79057HIGHRace condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to poteEPSS 0.1%CVE-2026-87554HIGHRace condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outsidEPSS 0.1%CVE-2026-16896HIGHIBM i is Affected By Multiple Vulnerabilities in Network Authentication ServiceEPSS 0.1%CVE-2026-87457HIGHRace condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside tEPSS 0.1%CVE-2026-68107HIGHdrm/amdgpu/vcn4: avoid rereading IB param lengthEPSS 0.1%CVE-2026-53410HIGHZoom Clients for Windows - Race ConditionEPSS 0.1%CVE-2026-16927HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2026-80047HIGHHugging Face Transformers library writes remote code to disk prior to consent checkEPSS 0.1%CVE-2024-0171MEDIUMDell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vEPSS 0.1%CVE-2026-2364HIGHCODESYS Installer TOCTOU Privilege EscalationEPSS 0.1%CVE-2026-16838HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2025-64457MEDIUMIn JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race conditionEPSS 0.1%CVE-2026-86805MEDIUMAT_SECURE programs may load attacker-controlled code via $ORIGINEPSS 0.1%CVE-2026-31997MEDIUMOpenClaw < 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run ApprovalsEPSS 0.1%CVE-2026-93315MEDIUMBuildKit proxy CA cleanup can be disrupted by build stepsEPSS 0.1%CVE-2026-35345MEDIUMuutils coreutils tail Privileged Information Disclosure via Symlink Replacement RaceEPSS 0.1%