← Back
CWE-362

2,963 CVEs • Abstraction: Class • Likelihood of Exploit: Medium

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

JSON object

Loading...

CVEs (2,963)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
7Windows 10
Windows 11Windows 8.1+4 more
Aug 10, 2026
Nov 9, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
1Microsoft
7Windows 10
Windows 11Windows 8.1+4 more
Aug 10, 2026
Nov 9, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
1Microsoft
9Windows 10
Windows 11Windows 7+6 more
Aug 10, 2026
Nov 9, 2022
N/A· v4
5.9 MEDIUM· v3
N/A· v2
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
1Microsoft
7Windows 10
Windows 11Windows 8.1+4 more
Aug 10, 2026
Nov 9, 2022
N/A· v4
8.1 HIGH· v3
N/A· v2
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
1Microsoft
9Windows 10
Windows 11Windows 7+6 more
Aug 10, 2026
Nov 9, 2022
N/A· v4
6.4 MEDIUM· v3
N/A· v2
Windows Group Policy Elevation of Privilege Vulnerability
1Microsoft
10Windows 10
Windows 11Windows 7+7 more
Aug 10, 2026
Nov 9, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
1Microsoft
2Windows 7
Windows Server 2008
Aug 10, 2026
Nov 9, 2022
N/A· v4
8.1 HIGH· v3
N/A· v2
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
1Microsoft
10Windows 10
Windows 11Windows 7+7 more
Aug 10, 2026
Nov 9, 2022
N/A· v4
8.1 HIGH· v3
N/A· v2
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
1Microsoft
2Azure Iot Edge For Linux
Windows Subsystem For Linux
Aug 10, 2026
Nov 9, 2022
N/A· v4
7.0 HIGH· v3
N/A· v2
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Nov 9, 2022
N/A· v4
5.9 MEDIUM· v3
N/A· v2
There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality.
1Huawei
2Emui
Harmonyos
Jun 17, 2026
Nov 9, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.
1Grafana
1Grafana
Jun 17, 2026
Nov 8, 2022
N/A· v4
8.1 HIGH· v3
N/A· v2
Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated us...Show more
Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patched in 9.2.4. There are no known workarounds.Show less
1Google
1Android
Jun 17, 2026
Nov 8, 2022
N/A· v4
6.4 MEDIUM· v3
N/A· v2
In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID:...Show more
In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07206340; Issue ID: ALPS07206340.Show less
1Google
1Android
Jun 17, 2026
Nov 8, 2022
N/A· v4
6.4 MEDIUM· v3
N/A· v2
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP...Show more
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203500; Issue ID: ALPS07203500.Show less
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Nov 1, 2022
N/A· v4
6.4 MEDIUM· v3
N/A· v2
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Nov 1, 2022
N/A· v4
6.4 MEDIUM· v3
N/A· v2
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Nov 1, 2022
N/A· v4
7.0 HIGH· v3
N/A· v2
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Nov 1, 2022
N/A· v4
7.0 HIGH· v3
N/A· v2
A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to ex...Show more
A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.Show less
1Apple
2Iphone Os
Macos
Jun 17, 2026
Nov 1, 2022
N/A· v4
7.0 HIGH· v3
N/A· v2
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
1Google
1Chrome
Jun 17, 2026
Nov 1, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)