Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

CVEs (2,963)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-4037 1Gitlab 1Gitlab Jun 17, 2026 Jan 12, 2023 N/A· v4 8.5 HIGH· v3 N/A· v2 An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A race condition can lead to verified email...Show more An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A race condition can lead to verified email forgery and takeover of third-party accounts when using GitLab as an OAuth provider.Show less
CVE-2023-21771 1Microsoft 3Windows 10 Windows 11Windows Server 2022 Jun 17, 2026 Jan 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
CVE-2023-21766 1Microsoft 5Windows 10 Windows 11Windows Server 2016+2 more Jun 17, 2026 Jan 10, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Windows Overlay Filter Information Disclosure Vulnerability
CVE-2023-21733 1Microsoft 6Windows 10 20h2 Windows 10 21h2Windows 10 22h2+3 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVE-2023-21725 1Microsoft 1Windows Malicious Software Removal Tool Jun 17, 2026 Jan 10, 2023 N/A· v4 6.3 MEDIUM· v3 N/A· v2 Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability
CVE-2023-21679 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21546 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21542 1Microsoft 9Windows 10 1607 Windows 7Windows 8.1+6 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Installer Elevation of Privilege Vulnerability
CVE-2023-21536 1Microsoft 8Windows 10 1809 Windows 10 20h2Windows 10 21h2+5 more Jun 17, 2026 Jan 10, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Event Tracing for Windows Information Disclosure Vulnerability
CVE-2023-21535 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 20h2+11 more Jun 17, 2026 Jan 10, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-32645 1Google 1Android Jun 17, 2026 Jan 3, 2023 N/A· v4 4.1 MEDIUM· v3 N/A· v2 In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494477; Issue ID: ALPS07494477.Show less
CVE-2022-2742 1Google 1Chrome Jun 17, 2026 Jan 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via...Show more Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. (Chrome security severity: High)Show less
CVE-2022-46174 1Amazon 2Efs Utils Elastic File System Container Storage Interface Driver Jun 17, 2026 Dec 28, 2022 N/A· v4 4.2 MEDIUM· v3 N/A· v2 efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file syste...Show more efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helper allocates a local port for stunnel to receive NFS connections prior to applying the TLS tunnel. In affected versions, concurrent mount operations can allocate the same local port, leading to either failed mount operations or an inappropriate mapping from an EFS customer’s local mount points to that customer’s EFS file systems. This issue is patched in version v1.34.4. There is no recommended work around. We recommend affected users update the installed version of efs-utils to v1.34.4 or later.Show less
CVE-2022-2583 1Gobase Project 1Gobase Jun 17, 2026 Dec 27, 2022 N/A· v4 3.7 LOW· v3 N/A· v2 A race condition can cause incorrect HTTP request routing.
CVE-2022-42930 1Mozilla 1Firefox Jun 17, 2026 Dec 22, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component. This vulnerability affects Firefox < 106.
CVE-2022-36318 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbi...Show more When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.Show less
CVE-2022-22763 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability affects Firefox < 96, Thunderbird < 91.6, and Firefox ESR < 91...Show more When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulnerability affects Firefox < 96, Thunderbird < 91.6, and Firefox ESR < 91.6.Show less
CVE-2022-22746 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 5.9 MEDIUM· v3 N/A· v2 A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>This bug only affects Firefox for Windows. Other operating systems are una...Show more A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.Show less
CVE-2022-22737 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Fire...Show more Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.Show less
CVE-2022-20567 1Google 1Android Jun 17, 2026 Dec 16, 2022 N/A· v4 6.4 MEDIUM· v3 N/A· v2 In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for e...Show more In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-186777253References: Upstream kernelShow less

Previous 1...838485...149 Next