CWE-362— Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.— MITRE CWE catalog
2,713 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-362page 34 of 55
- CVE-2026-28544MEDIUMCVSS 4.7EG 6.22026-03-05
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2022-25822MEDIUMCVSS 4.0EG 6.22022-03-10
An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash.
- CVE-2012-3511MEDIUMCVSS v2 6.2EG 6.22012-10-04
Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of service (use-after-free and system crash) via vectors involving a (1) munmap or (2) close syste…
- CVE-2012-3483MEDIUMCVSS v2 6.2EG 6.22012-08-26
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file.
- CVE-2010-5184MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malwa…
- CVE-2010-5183MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-bas…
- CVE-2010-5182MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in VirusBuster Internet Security Suite 3.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malw…
- CVE-2010-5180MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in VBA32 Personal 3.12.12.4 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, …
- CVE-2010-5179MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signa…
- CVE-2010-5178MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in ThreatFire 4.7.0.17 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via c…
- CVE-2010-5177MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Sophos Endpoint Security and Control 9.0.5 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based m…
- CVE-2010-5176MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Security Shield 2010 13.0.16.313 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware det…
- CVE-2010-5174MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certa…
- CVE-2010-5173MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in PC Tools Firewall Plus 6.0.0.88 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware dete…
- CVE-2010-5172MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Panda Internet Security 2010 15.01.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malwar…
- CVE-2010-5171MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Outpost Security Suite Pro 6.7.3.3063.452.0726 and 7.0.3330.505.1221 BETA on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but n…
- CVE-2010-5170MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Online Solutions Security Suite 1.5.14905.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based …
- CVE-2010-5168MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Symantec Norton Internet Security 2010 17.5.0.127 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-…
- CVE-2010-5167MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Norman Security Suite PRO 8.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detect…
- CVE-2010-5166MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malwar…
- CVE-2010-5165MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, vi…
- CVE-2010-5163MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based m…
- CVE-2010-5162MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via…
- CVE-2010-5161MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-ba…
- CVE-2010-5158MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in DefenseWall Personal Firewall 3.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware d…
- CVE-2010-5157MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-bas…
- CVE-2010-5156MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-bas…
- CVE-2010-5155MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, …
- CVE-2010-5154MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in BitDefender Total Security 2010 13.0.20.347 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based …
- CVE-2010-5152MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in AVG Internet Security 9.0.791 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detect…
- CVE-2010-5151MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware det…
- CVE-2010-5150MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in 3D EQSecure Professional Edition 4.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware…
- CVE-2010-4012MEDIUMCVSS v2 6.2EG 6.22010-12-08
Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button.
- CVE-2010-0732MEDIUMCVSS v2 6.2EG 6.22010-03-19
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proxim…
- CVE-2009-2836MEDIUMCVSS v2 6.2EG 6.22009-11-10
Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vecto…
- CVE-2007-1741MEDIUMCVSS v2 6.2EG 6.22007-04-13
Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink at…
- CVE-2006-5178MEDIUMCVSS v2 6.2EG 6.22006-10-10
Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the open_basedir check a…
- CVE-2006-4801MEDIUMCVSS v2 6.2EG 6.22006-09-14
Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are executed with raised privileges.
- CVE-2000-0864MEDIUMCVSS v2 6.2EG 6.22000-11-14
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack.
- CVE-2026-60161MEDIUMCVSS 6.1EG 6.12026-07-21
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastruc…
- CVE-2026-32088MEDIUMCVSS 6.1EG 6.12026-04-14
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2025-64118MEDIUMCVSS 6.1EG 6.12025-10-30
node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fi…
- CVE-2024-40887MEDIUMCVSS 6.1EG 6.12025-02-12
Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
- CVE-2024-54102MEDIUMCVSS 6.1EG 6.12024-12-12
Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CVE-2024-35899MEDIUMCVSS 6.1EG 6.12024-05-19
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0293280e ("netfilter: nf_tables: flush pending destroy work before netlink notifi…
- CVE-2020-11037MEDIUMCVSS 6.1EG 6.12020-04-30
In Wagtail before versions 2.7.3 and 2.8.2, a potential timing attack exists on pages or documents that have been protected with a shared password through Wagtail's "Privacy" controls. This password check is performed through a character-b…
- CVE-2019-3837MEDIUMCVSS 6.1EG 6.12019-04-11
It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same network socket in parallel executed on io…
- CVE-2018-0480MEDIUMCVSS 6.1EG 6.12018-10-05
A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) condition. The vulnerability is due to a race …
- CVE-2025-30394MEDIUMCVSS 5.9EG 6.12025-05-13
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
- CVE-2014-7154MEDIUMCVSS v2 6.1EG 6.12014-10-02
Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors.
Map vulnerabilities like CWE-362 to your infrastructure
EchelonGraph correlates every CVE — across CWE-362 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →