CWE-362— Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.— MITRE CWE catalog
2,711 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-362page 31 of 55
- CVE-2022-2160MEDIUMCVSS 6.5EG 6.52022-07-28
Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files …
- CVE-2022-31015MEDIUMCVSS 6.5EG 6.52022-05-31
Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select(). This will lead to the main thread…
- CVE-2021-31382MEDIUMCVSS 6.5EG 6.52021-10-19
On PTX1000 System, PTX10002-60C System, after upgrading to an affected release, a Race Condition vulnerability between the chassis daemon (chassisd) and firewall process (dfwd) of Juniper Networks Junos OS, may update the device's interfac…
- CVE-2020-1641MEDIUMCVSS 6.5EG 6.52020-07-17
A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service (DoS). This issue occurs when crafted LLDP packets are received by the device from an …
- CVE-2020-8834MEDIUMCVSS 6.5EG 6.52020-04-09
KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run co…
- CVE-2018-17244MEDIUMCVSS 6.5EG 6.52018-12-20
Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if…
- CVE-2026-11145MEDIUMCVSS 5.3EG 6.52026-06-04
Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
- CVE-2014-8750MEDIUMCVSS v2 6.5EG 6.52014-10-15
Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by spawning an instance that triggers the same VNC port to be alloc…
- CVE-2026-47565MEDIUMCVSS 6.4EG 6.42026-09-30
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a privileged user could trigger a race condition that leads to an out-of-bounds write. A successful exploit of this vulnerability might lead to cod…
- CVE-2026-100546MEDIUMCVSS 6.4EG 6.42026-09-26
OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path. Concurrent control-classified voice transcripts could consume speaker context belonging to anothe…
- CVE-2026-56988MEDIUMCVSS 6.4EG 6.42026-09-15
In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitatio…
- CVE-2026-56964MEDIUMCVSS 6.4EG 6.42026-09-15
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-56923MEDIUMCVSS 6.4EG 6.42026-09-15
In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex…
- CVE-2026-56915MEDIUMCVSS 6.4EG 6.42026-09-15
In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-70582MEDIUMCVSS 6.4EG 6.42026-09-08
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- CVE-2026-5774MEDIUMCVSS 6.4EG 6.42026-04-10
Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial of service on the server or possibly reuse a single-use discharge tok…
- CVE-2025-61792MEDIUMCVSS 6.4EG 6.42025-09-30
Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, the Help Button, the About button, and the Help Button, leading to a transition out of kiosk mode i…
- CVE-2024-28999MEDIUMCVSS 6.4EG 6.42024-06-04
The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.
- CVE-2023-48420MEDIUMCVSS 6.4EG 6.42023-12-08
there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- CVE-2023-35645MEDIUMCVSS 6.4EG 6.42023-10-11
In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- CVE-2023-20835MEDIUMCVSS 6.4EG 6.42023-09-04
In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue…
- CVE-2023-20834MEDIUMCVSS 6.4EG 6.42023-09-04
In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608514; Issue ID…
- CVE-2023-20827MEDIUMCVSS 6.4EG 6.42023-09-04
In ims service, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0793710…
- CVE-2023-20801MEDIUMCVSS 6.4EG 6.42023-08-07
In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07420968; Issu…
- CVE-2023-20771MEDIUMCVSS 6.4EG 6.42023-07-04
In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; I…
- CVE-2023-20736MEDIUMCVSS 6.4EG 6.42023-06-06
In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Iss…
- CVE-2023-33203MEDIUMCVSS 6.4EG 6.42023-05-18
The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker unplugs an emac based device.
- CVE-2023-20687MEDIUMCVSS 6.4EG 6.42023-04-06
In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570772; Iss…
- CVE-2023-20686MEDIUMCVSS 6.4EG 6.42023-04-06
In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07570826; Iss…
- CVE-2023-20685MEDIUMCVSS 6.4EG 6.42023-04-06
In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue I…
- CVE-2023-20684MEDIUMCVSS 6.4EG 6.42023-04-06
In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue I…
- CVE-2022-20567MEDIUMCVSS 6.4EG 6.42022-12-16
In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product…
- CVE-2022-32621MEDIUMCVSS 6.4EG 6.42022-12-05
In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310829; Iss…
- CVE-2022-45888MEDIUMCVSS 6.4EG 6.42022-11-25
An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.
- CVE-2022-41086MEDIUMCVSS 6.4EG 6.42022-11-09
Windows Group Policy Elevation of Privilege Vulnerability
- CVE-2022-32613MEDIUMCVSS 6.4EG 6.42022-11-08
In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07206340; Issue…
- CVE-2022-32612MEDIUMCVSS 6.4EG 6.42022-11-08
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203500; Issue ID…
- CVE-2022-42832MEDIUMCVSS 6.4EG 6.42022-11-01
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
- CVE-2022-42831MEDIUMCVSS 6.4EG 6.42022-11-01
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
- CVE-2022-44034MEDIUMCVSS 6.4EG 6.42022-10-30
An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condit…
- CVE-2022-44033MEDIUMCVSS 6.4EG 6.42022-10-30
An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condit…
- CVE-2022-44032MEDIUMCVSS 6.4EG 6.42022-10-30
An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condit…
- CVE-2022-26450MEDIUMCVSS 6.4EG 6.42022-09-06
In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07177801; Issue…
- CVE-2022-20256MEDIUMCVSS 6.4EG 6.42022-08-12
In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVe…
- CVE-2022-20373MEDIUMCVSS 6.4EG 6.42022-08-11
In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…
- CVE-2022-20371MEDIUMCVSS 6.4EG 6.42022-08-11
In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for explo…
- CVE-2022-26428MEDIUMCVSS 6.4EG 6.42022-08-01
In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0652126…
- CVE-2022-21789MEDIUMCVSS 6.4EG 6.42022-08-01
In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06478101;…
- CVE-2022-21776MEDIUMCVSS 6.4EG 6.42022-07-06
In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID…
- CVE-2022-20154MEDIUMCVSS 6.4EG 6.42022-06-15
In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: A…
Map vulnerabilities like CWE-362 to your infrastructure
EchelonGraph correlates every CVE — across CWE-362 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →