Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

CVEs (2,965)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-35351 1Microsoft 5Windows Server 2008 Windows Server 2012Windows Server 2016+2 more Jun 17, 2026 Jul 11, 2023 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
CVE-2023-35346 1Microsoft 5Windows Server 2008 Windows Server 2012Windows Server 2016+2 more Jun 17, 2026 Jul 11, 2023 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-35310 1Microsoft 5Windows Server 2008 Windows Server 2012Windows Server 2016+2 more Jun 17, 2026 Jul 11, 2023 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-35309 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-33170 2Fedoraproject Microsoft 3.net FedoraVisual Studio 2022 Jun 17, 2026 Jul 11, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 ASP.NET and Visual Studio Security Feature Bypass Vulnerability
CVE-2023-3108 1Linux 1Linux Kernel Jun 17, 2026 Jul 11, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 A flaw was found in the subsequent get_user_pages_fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/algif_skcipher.c function. This flaw allows a local user to cra...Show more A flaw was found in the subsequent get_user_pages_fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/algif_skcipher.c function. This flaw allows a local user to crash the system.Show less
CVE-2023-1672 3Fedoraproject RedhatTang Project 3Enterprise Linux FedoraTang Jun 17, 2026 Jul 11, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.
CVE-2023-32254 2Linux Netapp 6H300s H410sH500s+3 more Jun 17, 2026 Jul 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking wh...Show more A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.Show less
CVE-2023-32250 2Linux Netapp 7H300s H410sH500s+4 more Jun 17, 2026 Jul 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when...Show more A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.Show less
CVE-2022-48509 1Huawei 2Emui Harmonyos Jun 17, 2026 Jul 6, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.
CVE-2023-35863 1Madefornet 1Http Debugger Jun 17, 2026 Jul 5, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSD...Show more In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access.Show less
CVE-2023-2010 1Incsub 1Forminator Jun 17, 2026 Jul 4, 2023 N/A· v4 3.1 LOW· v3 N/A· v2 The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to v...Show more The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to vote multiple times on a poll.Show less
CVE-2023-20771 1Google 1Android Jun 17, 2026 Jul 4, 2023 N/A· v4 6.4 MEDIUM· v3 N/A· v2 In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046.Show less
CVE-2023-21178 1Google 1Android Jun 17, 2026 Jun 28, 2023 N/A· v4 4.1 MEDIUM· v3 N/A· v2 In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not neede...Show more In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-140762419Show less
CVE-2023-32413 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Jun 23, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPad...Show more A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to gain root privileges.Show less
CVE-2023-35829 2Linux Netapp 5H300s H410sH500s+2 more Jun 17, 2026 Jun 18, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.
CVE-2023-35828 2Linux Netapp 6H300s H410cH410s+3 more Jun 17, 2026 Jun 18, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.
CVE-2023-35827 1Linux 1Linux Kernel Oct 15, 2026 Jun 18, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c.
CVE-2023-35826 2Linux Netapp 6H300s H410cH410s+3 more Jun 17, 2026 Jun 18, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.
CVE-2023-35824 2Debian Linux 2Debian Linux Linux Kernel Jun 17, 2026 Jun 18, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.

Previous 1...798081...149 Next