← Back
CWE-667

764 CVEs • Abstraction: Class

Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

JSON object

Loading...

CVEs (764)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Windows 2000
Apr 16, 2026
Apr 4, 2002
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.
1Qualcomm
1Qpopper
Apr 16, 2026
Aug 31, 2001
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.
2Checkpoint
Zonelabs
2Zonealarm
Zonealarm Pro
Apr 16, 2026
Aug 29, 2001
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting.
1Concurrent Versions Software Project
1Concurrent Versions Software
Apr 16, 2026
Apr 23, 2000
N/A· v4
5.5 MEDIUM· v3
5.0 MEDIUM· v2
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS...Show more
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.Show less