CWE-362— Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.— MITRE CWE catalog
2,711 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-362page 23 of 55
- CVE-2022-29582HIGHCVSS 7.0EG 7.02022-04-22
In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who has no access to any user namespace; however, the race condition perhaps can only…
- CVE-2022-29527HIGHCVSS 7.0EG 7.02022-04-20
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.
- CVE-2022-26828HIGHCVSS 7.0EG 7.02022-04-15
Windows Bluetooth Driver Elevation of Privilege Vulnerability
- CVE-2022-26827HIGHCVSS 7.0EG 7.02022-04-15
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
- CVE-2022-26808HIGHCVSS 7.0EG 7.02022-04-15
Windows File Explorer Elevation of Privilege Vulnerability
- CVE-2022-26807HIGHCVSS 7.0EG 7.02022-04-15
Windows Work Folder Service Elevation of Privilege Vulnerability
- CVE-2022-24540HIGHCVSS 7.0EG 7.02022-04-15
Windows ALPC Elevation of Privilege Vulnerability
- CVE-2022-24482HIGHCVSS 7.0EG 7.02022-04-15
Windows ALPC Elevation of Privilege Vulnerability
- CVE-2022-28796HIGHCVSS 7.0EG 7.02022-04-08
jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.
- CVE-2022-26357HIGHCVSS 7.0EG 7.02022-04-05
race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are ma…
- CVE-2021-4202HIGHCVSS 7.0EG 7.02022-03-25
A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is gettin…
- CVE-2021-39686HIGHCVSS 7.0EG 7.02022-03-16
In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i…
- CVE-2022-23042HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23041HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23040HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23039HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23038HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23037HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23036HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-24525HIGHCVSS 7.0EG 7.02022-03-09
Windows Update Stack Elevation of Privilege Vulnerability
- CVE-2022-24505HIGHCVSS 7.0EG 7.02022-03-09
Windows ALPC Elevation of Privilege Vulnerability
- CVE-2022-24460HIGHCVSS 7.0EG 7.02022-03-09
Tablet Windows User Interface Application Elevation of Privilege Vulnerability
- CVE-2022-23298HIGHCVSS 7.0EG 7.02022-03-09
Windows NT OS Kernel Elevation of Privilege Vulnerability
- CVE-2022-23288HIGHCVSS 7.0EG 7.02022-03-09
Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2022-23283HIGHCVSS 7.0EG 7.02022-03-09
Windows ALPC Elevation of Privilege Vulnerability
- CVE-2021-3640HIGHCVSS 7.0EG 7.02022-03-03
A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sen…
- CVE-2021-3609HIGHCVSS 7.0EG 7.02022-03-03
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the …
- CVE-2022-24114HIGHCVSS 7.0EG 7.02022-02-04
Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287
- CVE-2021-4083HIGHCVSS 7.0EG 7.02022-01-18
A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a …
- CVE-2021-39679HIGHCVSS 7.0EG 7.02022-01-14
In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo…
- CVE-2021-39629HIGHCVSS 7.0EG 7.02022-01-14
In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need…
- CVE-2022-21896HIGHCVSS 7.0EG 7.02022-01-11
Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2021-44733HIGHCVSS 7.0EG 7.02021-12-22
A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.
- CVE-2021-0955HIGHCVSS 7.0EG 7.02021-12-15
In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio…
- CVE-2021-44513HIGHCVSS 7.0EG 7.02021-12-07
Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling.
- CVE-2020-12951HIGHCVSS 7.0EG 7.02021-11-16
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.
- CVE-2021-0688HIGHCVSS 7.0EG 7.02021-10-06
In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.…
- CVE-2021-30652HIGHCVSS 7.0EG 7.02021-09-08
A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious applica…
- CVE-2021-30786HIGHCVSS 7.0EG 7.02021-09-08
A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.
- CVE-2021-40490HIGHCVSS 7.0EG 7.02021-09-03
A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
- CVE-2021-31004HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5. An application may be able to gain elevated privileges.
- CVE-2021-30996HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30995HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may…
- CVE-2021-30955HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30933HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30923HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30899HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel p…
- CVE-2021-30868HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30857HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. A malicious application may be able to …
- CVE-2021-0565HIGHCVSS 7.0EG 7.02021-06-22
In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat…
Map vulnerabilities like CWE-362 to your infrastructure
EchelonGraph correlates every CVE — across CWE-362 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →