← Back
CWE-362

2,498 CVEs • Abstraction: Class • Likelihood of Exploit: Medium

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

JSON object

Loading...

CVEs (2,498)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Linux
Netapp
6H300s
H410sH500s+3 more
Jun 17, 2026
Jul 10, 2023
N/A· v4
8.1 HIGH· v3
N/A· v2
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking wh...Show more
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.Show less
2Linux
Netapp
7H300s
H410sH500s+4 more
Jun 17, 2026
Jul 10, 2023
N/A· v4
8.1 HIGH· v3
N/A· v2
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when...Show more
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.Show less
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Jul 6, 2023
N/A· v4
5.9 MEDIUM· v3
N/A· v2
Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.
1Madefornet
1Http Debugger
Jun 17, 2026
Jul 5, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSD...Show more
In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access.Show less
1Incsub
1Forminator
Jun 17, 2026
Jul 4, 2023
N/A· v4
3.1 LOW· v3
N/A· v2
The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to v...Show more
The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to vote multiple times on a poll.Show less
1Google
1Android
Jun 17, 2026
Jul 4, 2023
N/A· v4
6.4 MEDIUM· v3
N/A· v2
In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more
In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046.Show less
1Google
1Android
Jun 17, 2026
Jun 28, 2023
N/A· v4
4.1 MEDIUM· v3
N/A· v2
In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not neede...Show more
In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-140762419Show less
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Jun 23, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPad...Show more
A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to gain root privileges.Show less
2Linux
Netapp
5H300s
H410sH500s+2 more
Jun 17, 2026
Jun 18, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.
2Linux
Netapp
6H300s
H410cH410s+3 more
Jun 17, 2026
Jun 18, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.
1Linux
1Linux Kernel
Jun 17, 2026
Jun 18, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c.
2Linux
Netapp
6H300s
H410cH410s+3 more
Jun 17, 2026
Jun 18, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.
2Debian
Linux
2Debian Linux
Linux Kernel
Jun 17, 2026
Jun 18, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.
2Debian
Linux
2Debian Linux
Linux Kernel
Jun 17, 2026
Jun 18, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.
1Google
1Android
Jun 17, 2026
Jun 15, 2023
N/A· v4
7.0 HIGH· v3
N/A· v2
In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...Show more
In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-258189255Show less
1Google
1Android
Jun 17, 2026
Jun 15, 2023
N/A· v4
4.7 MEDIUM· v3
N/A· v2
In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privilege...Show more
In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-242704576Show less
1Hp
327Dragonfly Folio G3 2 In 1 Firmware
Elite Dragonfly FirmwareElite Dragonfly G2 Firmware+324 more
Jun 17, 2026
Jun 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
1Google
1Android
Jun 17, 2026
Jun 6, 2023
N/A· v4
4.1 MEDIUM· v3
N/A· v2
In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID...Show more
In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780926; Issue ID: ALPS07780928.Show less
2Google
Linuxfoundation
3Android
Iot YoctoYocto
Jun 17, 2026
Jun 6, 2023
N/A· v4
6.4 MEDIUM· v3
N/A· v2
In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID...Show more
In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Issue ID: ALPS07645189.Show less
1Mozilla
2Firefox
Focus
Jun 17, 2026
Jun 2, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Androi...Show more
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.Show less