Falhas do tipo CWE-367

799 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2024-30099HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2024-27114HIGHRemote Code Execution through File Upload in SOPlanning before 1.52.02EPSS 0.5%CVE-2023-21537HIGHMicrosoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2023-0778MEDIUMA Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume wiEPSS 0.5%CVE-2022-22225MEDIUMJunos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crashEPSS 0.5%CVE-2022-22220MEDIUMJunos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec routeEPSS 0.5%CVE-2026-25641CRITICALSandboxJS has a sandbox escape via TOCTOU bug on keys in property accessesEPSS 0.5%CVE-2025-48818MEDIUMWindows BitLocker Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2024-38153HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2026-69804HIGHMicrosoft Office SharePoint Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-56648HIGHWindows NFS Server Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-47290HIGHContainerd vulnerable to host filesystem access during image unpackEPSS 0.5%CVE-2026-88173HIGHWindows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-1729MEDIUMTiming Attack Vulnerability in gradio-app/gradioEPSS 0.5%CVE-2020-15702HIGHTOCTOU in apportEPSS 0.5%CVE-2024-39936HIGHAn issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6EPSS 0.5%CVE-2026-27127HIGHCraft CMS has Cloud Metadata SSRF Protection Bypass via DNS RebindingEPSS 0.5%CVE-2022-48618HIGHThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. AEPSS 0.5%KEVCVE-2024-49768CRITICALWaitress has request processing race condition in HTTP pipelining with invalid first requestEPSS 0.5%CVE-2026-43632CRITICALllama.cpp b7492–b9060 Use-After-Free in Tokenization EndpointsEPSS 0.5%