Falhas do tipo CWE-367

800 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2026-31997MEDIUMOpenClaw < 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run ApprovalsEPSS 0.1%CVE-2022-27834LOWUse after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform EPSS 0.1%CVE-2026-92369HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege EscalationEPSS 0.1%CVE-2024-43067HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in CameraEPSS 0.1%CVE-2026-18567MEDIUMIBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]EPSS 0.1%CVE-2026-6505MEDIUMThe ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. ThEPSS 0.1%CVE-2026-102672MEDIUMElectron: Local race condition in Squirrel.Mac update installation on macOSEPSS 0.1%CVE-2026-54327LOWPi: Race condition in auth.json writes could expose stored credentialsEPSS 0.1%CVE-2026-92374HIGHPrivilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOSEPSS 0.1%CVE-2026-45197LOWGPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSetEPSS 0.1%CVE-2025-54655HIGHRace condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentialityEPSS 0.1%CVE-2026-35364MEDIUMuutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race ConditionEPSS 0.1%CVE-2026-91813HIGHFoxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation VulnerabilityEPSS 0.1%CVE-2026-41360MEDIUMOpenClaw < 2026.4.2 - Approval Integrity Bypass in pnpm dlx Local Script BindingEPSS 0.1%CVE-2026-35357MEDIUMuutils coreutils cp Information Disclosure via Permission Handling RaceEPSS 0.1%CVE-2026-54370HIGHacl < 2.4.0 TOCTOU Symlink Traversal via getfacl/setfacl/chaclEPSS 0.1%CVE-2026-33574MEDIUMOpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills DownloadEPSS 0.1%CVE-2024-53032HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS PlatformEPSS 0.1%CVE-2024-53028HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in Automotive Vehicle NetworksEPSS 0.1%CVE-2022-33214HIGHMemory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon CEPSS 0.1%