Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

CVEs (2,955)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-0764 1Redhat 1Networkmanager May 13, 2026 Jul 17, 2017 N/A· v4 6.2 MEDIUM· v3 2.1 LOW· v2 Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows...Show more Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.Show less
CVE-2014-7953 1Google 1Android May 13, 2026 Jul 7, 2017 N/A· v4 7.0 HIGH· v3 6.9 MEDIUM· v2 Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running "pm install" with t...Show more Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running "pm install" with the target apk, and simultaneously running a crafted script to process logcat's output looking for a dexopt line, which once found should execute bindBackupAgent with the uid member of the ApplicationInfo parameter set to 1000.Show less
CVE-2017-10915 1Xen 1Xen May 13, 2026 Jul 5, 2017 N/A· v4 9.0 CRITICAL· v3 6.8 MEDIUM· v2 The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219.
CVE-2017-10914 1Xen 1Xen May 13, 2026 Jul 5, 2017 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain...Show more The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2.Show less
CVE-2017-8242 1Google 1Android May 13, 2026 Jun 13, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write.
CVE-2017-7372 1Google 1Android May 13, 2026 Jun 13, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary pointer location.
CVE-2017-7368 1Google 1Android May 13, 2026 Jun 13, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver.
CVE-2015-9022 1Google 1Android May 13, 2026 Jun 13, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.
CVE-2014-9966 1Google 1Android May 13, 2026 Jun 13, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display.
CVE-2015-5232 1Cornelisnetworks 2Opa Ff Opa Fm May 13, 2026 Jun 7, 2017 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.
CVE-2016-10297 1Google 1Android May 13, 2026 Jun 6, 2017 N/A· v4 7.0 HIGH· v3 9.3 HIGH· v2 In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.
CVE-2014-9941 1Google 1Android May 13, 2026 Jun 6, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.
CVE-2017-1000367 1Sudo Project 1Sudo May 13, 2026 Jun 5, 2017 N/A· v4 6.4 MEDIUM· v3 6.9 MEDIUM· v2 Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
CVE-2017-6512 3Canonical DebianFile 3\ Debian LinuxUbuntu Linux May 13, 2026 Jun 1, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic.
CVE-2017-6979 1Apple 4Iphone Os Mac Os XTvos+1 more May 13, 2026 May 22, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "IOSurface" com...Show more An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "IOSurface" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.Show less
CVE-2017-2533 1Apple 1Mac Os X May 13, 2026 May 22, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context...Show more An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.Show less
CVE-2017-2501 1Apple 4Iphone Os Mac Os XTvos+1 more May 13, 2026 May 22, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" compon...Show more An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.Show less
CVE-2016-10242 1Google 1Android May 13, 2026 May 16, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.
CVE-2015-8997 1Google 1Android May 13, 2026 May 16, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel.
CVE-2015-8996 1Google 1Android May 13, 2026 May 16, 2017 N/A· v4 7.0 HIGH· v3 7.6 HIGH· v2 In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel.

Previous 1...125126127...148 Next