Falhas do tipo CWE-367

800 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2026-33574MEDIUMOpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills DownloadEPSS 0.1%CVE-2025-20028HIGHTime-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an escalation of privileEPSS 0.1%CVE-2026-87038HIGHTime-of-check/time-of-use double fetch in the Zephyr i3c_transfer() syscall handler allows kernel-mode control-flow hijack from user modeEPSS 0.1%CVE-2022-33257CRITICALTime-of-check time-of-use race condition in CoreEPSS 0.1%CVE-2025-22850MEDIUMTime-of-check time-of-use race condition in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosureEPSS 0.1%CVE-2026-27670MEDIUMOpenClaw < 2026.3.2 - Arbitrary File Write via ZIP Extraction Parent Symlink Race ConditionEPSS 0.1%CVE-2025-27725MEDIUMTime-of-check time-of-use race condition for some ACAT before version 3.13 within Ring 3: User Applications may allow a denial of service. UEPSS 0.1%CVE-2026-108361HIGHPrivasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU AttacksEPSS 0.1%CVE-2026-2638HIGHX-VPN macOS website versions - Local Privilege EscalationEPSS 0.1%CVE-2023-28576MEDIUMTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel DriverEPSS 0.1%CVE-2026-104474MEDIUMOpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-UpdateEPSS 0.1%CVE-2025-64390HIGHA privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Disc Java) sandbox canEPSS 0.1%CVE-2026-40058HIGHVulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for WindowsEPSS 0.1%CVE-2026-25704MEDIUMIncomplete privilege drop for com.system76.CosmicGreeter.GetUserDataEPSS 0.1%CVE-2025-21485HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceEPSS 0.1%CVE-2025-21455HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in Camera_LinuxEPSS 0.1%CVE-2022-25716MEDIUMTime-of-check Time-of-use Race Condition in Multimedia FrameworkEPSS 0.1%CVE-2026-100597HIGHOpenClaw before 2026.7.1 Path Traversal via Filesystem RaceEPSS 0.1%CVE-2023-33046HIGHTime-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution EnvironmentEPSS 0.1%CVE-2022-23826LOWA TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race conditiEPSS 0.1%