Falhas do tipo CWE-367

680 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2025-24036HIGHMicrosoft AutoUpdate (MAU) Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2024-47494HIGHJunos OS: Due to a race condition AgentD process causes a memory corruption and FPC resetEPSS 0.4%CVE-2026-20809HIGHWindows Kernel Memory Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-35378HIGHWindows Projected File System Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2023-25394HIGHVideostream macOS app 0.5.0 and 0.4.3 has a Race Condition. The Updater privileged script attempts to update Videostream every 5 hours.EPSS 0.3%CVE-2026-48931LOWA flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vEPSS 0.3%CVE-2020-8833MEDIUMApport race condition in crash report permissionsEPSS 0.3%CVE-2026-57818HIGHApache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProviderEPSS 0.3%CVE-2026-43632CRITICALllama.cpp b7492–b9060 Use-After-Free in Tokenization EndpointsEPSS 0.3%CVE-2026-6180MEDIUMPaperCut MF: Card truncation on HP readersEPSS 0.3%CVE-2022-45842MEDIUMWordPress WP ULike Plugin <= 4.6.4 is vulnerable to Race Condition vulnerabilityEPSS 0.3%CVE-2025-62003HIGHBullWall Server Intrusion Protection RDP MFA connection delayEPSS 0.3%CVE-2022-0280HIGHMcAfee Total Protection (MTP) - File Deletion vulnerabilityEPSS 0.3%CVE-2021-20181—A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client EPSS 0.3%CVE-2026-33659LOWEspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network AccessEPSS 0.3%CVE-2026-43927MEDIUMFOSSBilling has race condition in cart checkout that bypasses promo code usage limitsEPSS 0.3%CVE-2025-67124MEDIUMA TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite arEPSS 0.3%CVE-2023-44188MEDIUMJunos OS: jkdsd crash due to multiple telemetry requestsEPSS 0.3%CVE-2023-6690LOWA race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphEPSS 0.3%CVE-2019-7307MEDIUMApport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xmlEPSS 0.3%