CWE-362— Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.— MITRE CWE catalog
2,711 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-362page 22 of 55
- CVE-2023-35824HIGHCVSS 7.0EG 7.02023-06-18
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.
- CVE-2023-35823HIGHCVSS 7.0EG 7.02023-06-18
An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.
- CVE-2023-21101HIGHCVSS 7.0EG 7.02023-06-15
In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo…
- CVE-2023-24899HIGHCVSS 7.0EG 7.02023-05-09
Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2023-2006HIGHCVSS 7.0EG 7.02023-04-24
A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to esca…
- CVE-2023-26980HIGHCVSS 7.0EG 7.02023-04-14
PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to boot directly to Android during the boot process. NOTE: the vendor disputes this…
- CVE-2023-28273HIGHCVSS 7.0EG 7.02023-04-11
Windows Clip Service Elevation of Privilege Vulnerability
- CVE-2023-28144HIGHCVSS 7.0EG 7.02023-03-14
KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls.
- CVE-2023-24861HIGHCVSS 7.0EG 7.02023-03-14
Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2023-23393HIGHCVSS 7.0EG 7.02023-03-14
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability
- CVE-2020-19824HIGHCVSS 7.0EG 7.02023-02-17
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
- CVE-2023-21771HIGHCVSS 7.0EG 7.02023-01-10
Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
- CVE-2023-21733HIGHCVSS 7.0EG 7.02023-01-10
Windows Bind Filter Driver Elevation of Privilege Vulnerability
- CVE-2023-21542HIGHCVSS 7.0EG 7.02023-01-10
Windows Installer Elevation of Privilege Vulnerability
- CVE-2022-42864HIGHCVSS 7.0EG 7.02022-12-15
A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may…
- CVE-2022-44669HIGHCVSS 7.0EG 7.02022-12-13
Windows Error Reporting Elevation of Privilege Vulnerability
- CVE-2021-39660HIGHCVSS 7.0EG 7.02022-12-13
In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f…
- CVE-2022-45886HIGHCVSS 7.0EG 7.02022-11-25
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free.
- CVE-2022-45885HIGHCVSS 7.0EG 7.02022-11-25
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected.
- CVE-2022-45884HIGHCVSS 7.0EG 7.02022-11-25
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.
- CVE-2022-41114HIGHCVSS 7.0EG 7.02022-11-09
Windows Bind Filter Driver Elevation of Privilege Vulnerability
- CVE-2022-38014HIGHCVSS 7.0EG 7.02022-11-09
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
- CVE-2022-42806HIGHCVSS 7.0EG 7.02022-11-01
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
- CVE-2022-42803HIGHCVSS 7.0EG 7.02022-11-01
A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary cod…
- CVE-2022-42791HIGHCVSS 7.0EG 7.02022-11-01
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
- CVE-2022-20422HIGHCVSS 7.0EG 7.02022-10-11
In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne…
- CVE-2021-0696HIGHCVSS 7.0EG 7.02022-10-11
In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.…
- CVE-2022-38029HIGHCVSS 7.0EG 7.02022-10-11
Windows ALPC Elevation of Privilege Vulnerability
- CVE-2022-38027HIGHCVSS 7.0EG 7.02022-10-11
Windows Storage Elevation of Privilege Vulnerability
- CVE-2022-38021HIGHCVSS 7.0EG 7.02022-10-11
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
- CVE-2021-0697HIGHCVSS 7.0EG 7.02022-09-13
In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
- CVE-2022-34725HIGHCVSS 7.0EG 7.02022-09-13
Windows ALPC Elevation of Privilege Vulnerability
- CVE-2022-26928HIGHCVSS 7.0EG 7.02022-09-13
Windows Photo Import API Elevation of Privilege Vulnerability
- CVE-2022-1729HIGHCVSS 7.0EG 7.02022-09-01
A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary …
- CVE-2022-3028HIGHCVSS 7.0EG 7.02022-08-31
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of…
- CVE-2022-2590HIGHCVSS 7.0EG 7.02022-08-31
A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only …
- CVE-2022-1247HIGHCVSS 7.0EG 7.02022-08-31
An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects are using the rose_neigh. When a user wants to delete a rose_route via rose_ioctl(), the ro…
- CVE-2022-2961HIGHCVSS 7.0EG 7.02022-08-29
A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or …
- CVE-2022-2959HIGHCVSS 7.0EG 7.02022-08-25
A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing opera…
- CVE-2022-24951HIGHCVSS 7.0EG 7.02022-08-16
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.
- CVE-2022-20344HIGHCVSS 7.0EG 7.02022-08-10
In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User inter…
- CVE-2022-20082HIGHCVSS 7.0EG 7.02022-07-06
In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; I…
- CVE-2022-33915HIGHCVSS 7.0EG 7.02022-06-17
Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating t…
- CVE-2022-20155HIGHCVSS 7.0EG 7.02022-06-15
In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. U…
- CVE-2022-26939HIGHCVSS 7.0EG 7.02022-05-10
Storage Spaces Direct Elevation of Privilege Vulnerability
- CVE-2022-20118HIGHCVSS 7.0EG 7.02022-05-10
In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex…
- CVE-2022-20007HIGHCVSS 7.0EG 7.02022-05-10
In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation …
- CVE-2022-20006HIGHCVSS 7.0EG 7.02022-05-10
In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condition. This could lead to local escalation of privilege if a Guest user is enable…
- CVE-2022-20110HIGHCVSS 7.0EG 7.02022-05-03
In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; I…
- CVE-2022-1048HIGHCVSS 7.0EG 7.02022-04-29
A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a…
Map vulnerabilities like CWE-362 to your infrastructure
EchelonGraph correlates every CVE — across CWE-362 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →