CWE-362— Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.— MITRE CWE catalog
2,712 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-362page 32 of 55
- CVE-2022-20148MEDIUMCVSS 6.4EG 6.42022-06-15
In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: And…
- CVE-2022-26362MEDIUMCVSS 6.4EG 6.42022-06-09
x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direc…
- CVE-2022-20091MEDIUMCVSS 6.4EG 6.42022-05-03
In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; I…
- CVE-2022-20090MEDIUMCVSS 6.4EG 6.42022-05-03
In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209197; I…
- CVE-2022-20080MEDIUMCVSS 6.4EG 6.42022-04-11
In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05881290; Iss…
- CVE-2022-20078MEDIUMCVSS 6.4EG 6.42022-04-11
In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05852819; Issue …
- CVE-2022-20077MEDIUMCVSS 6.4EG 6.42022-04-11
In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue …
- CVE-2021-39735MEDIUMCVSS 6.4EG 6.42022-03-16
In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed…
- CVE-2021-39712MEDIUMCVSS 6.4EG 6.42022-03-16
In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: An…
- CVE-2022-20013MEDIUMCVSS 6.4EG 6.42022-01-04
In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05837742…
- CVE-2021-39642MEDIUMCVSS 6.4EG 6.42021-12-15
In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed fo…
- CVE-2021-22004MEDIUMCVSS 6.4EG 6.42021-09-08
An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert …
- CVE-2021-3573MEDIUMCVSS 6.4EG 6.42021-08-13
A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls …
- CVE-2021-0564MEDIUMCVSS 6.4EG 6.42021-06-22
In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: …
- CVE-2020-8704MEDIUMCVSS 6.4EG 6.42021-06-09
Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2020-8670MEDIUMCVSS 6.4EG 6.42021-06-09
Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2021-20261MEDIUMCVSS 6.4EG 6.42021-03-11
A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device (/dev/fd0) are restricte…
- CVE-2021-0387MEDIUMCVSS 6.4EG 6.42021-03-10
In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat…
- CVE-2021-0401MEDIUMCVSS 6.4EG 6.42021-02-26
In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Andro…
- CVE-2021-0367MEDIUMCVSS 6.4EG 6.42021-02-26
In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: A…
- CVE-2021-0366MEDIUMCVSS 6.4EG 6.42021-02-26
In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: A…
- CVE-2020-11152MEDIUMCVSS 6.4EG 6.42021-01-21
Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago…
- CVE-2020-11151MEDIUMCVSS 6.4EG 6.42021-01-21
Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Sna…
- CVE-2020-27837MEDIUMCVSS 6.4EG 6.42020-12-28
A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. …
- CVE-2020-27067MEDIUMCVSS 6.4EG 6.42020-12-15
In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVe…
- CVE-2020-25651MEDIUMCVSS 6.4EG 6.42020-11-26
A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate local user in the VM system. Active file transfers from other users could also …
- CVE-2020-8755MEDIUMCVSS 6.4EG 6.42020-11-12
Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5_04.01.04.400 and E3_05.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physica…
- CVE-2020-0268MEDIUMCVSS 6.4EG 6.42020-09-18
In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android…
- CVE-2020-0428MEDIUMCVSS 6.4EG 6.42020-09-17
In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions:…
- CVE-2020-25285MEDIUMCVSS 6.4EG 6.42020-09-13
A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory, cause a NULL pointer dereference, or possibly have unspecified other impact, aka CID-1774…
- CVE-2020-15706MEDIUMCVSS 6.4EG 6.42020-07-29
GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution a…
- CVE-2020-0305MEDIUMCVSS 6.4EG 6.42020-07-17
In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: Andro…
- CVE-2020-0126MEDIUMCVSS 6.4EG 6.42020-06-11
In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product:…
- CVE-2020-10845MEDIUMCVSS 6.4EG 6.42020-03-24
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. There is a race condition leading to a use-after-free in MTP. The Samsung ID is SVE-2019-16520 (February 2020).
- CVE-2020-0066MEDIUMCVSS 6.4EG 6.42020-03-10
In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: Andr…
- CVE-2020-0045MEDIUMCVSS 6.4EG 6.42020-03-10
In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploit…
- CVE-2019-9375MEDIUMCVSS 6.4EG 6.42019-09-27
In hostapd, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersion…
- CVE-2019-2189MEDIUMCVSS 6.4EG 6.42019-09-27
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVers…
- CVE-2019-2188MEDIUMCVSS 6.4EG 6.42019-09-27
In the Easel driver, there is possible memory corruption due to race conditions. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVers…
- CVE-2019-9450MEDIUMCVSS 6.4EG 6.42019-09-06
In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not nee…
- CVE-2019-9271MEDIUMCVSS 6.4EG 6.42019-09-06
In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which could lead to escalation of privilege with System execution privileges needed. User interaction is not…
- CVE-2018-9519MEDIUMCVSS 6.4EG 6.42018-12-07
In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System privileges required. User interaction is not needed for exploitation. Product:…
- CVE-2017-1000367MEDIUMCVSS 6.4EG 6.42017-06-05
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
- CVE-2016-9962MEDIUMCVSS 6.4EG 6.42017-01-31
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during…
- CVE-2015-8511MEDIUMCVSS 6.4EG 6.42016-01-09
Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors.
- CVE-2023-41090MEDIUMCVSS 1.8EG 6.42024-02-14
Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2014-9150MEDIUMCVSS v2 6.4EG 6.42014-11-30
Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently write to files in arbitrary locations, via an NTFS ju…
- CVE-2008-4392MEDIUMCVSS v2 6.4EG 6.42009-02-19
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of…
- CVE-2026-107276MEDIUMCVSS 6.3EG 6.32026-10-07
MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause…
- CVE-2026-101041MEDIUMCVSS 6.3EG 6.32026-09-27
The account recovery (password reset) functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use (TOCTOU) race condition in the consumption of single-use recovery tokens. The original implementation v…
Map vulnerabilities like CWE-362 to your infrastructure
EchelonGraph correlates every CVE — across CWE-362 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →