CWE-421— Race Condition During Access to Alternate Channel
The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.— MITRE CWE catalog
8 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-421page 1 of 1
- CVE-2023-22276MEDIUMCVSS 6.5EG 6.52023-08-11
Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentially enable denial of service via local access.
- CVE-2023-22310MEDIUMCVSS 6.5EG 6.52023-11-14
Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access.
- CVE-2023-32256HIGHCVSS 7.5EG 7.52025-08-01
A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue.
- CVE-2023-34349MEDIUMCVSS 4.6EG 4.62023-08-11
Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2023-34438HIGHCVSS 7.5EG 7.52023-08-11
Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2023-40536MEDIUMCVSS 4.3EG 4.32024-05-16
Race condition for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
- CVE-2023-41090LOWCVSS 1.8EG 6.42024-02-14
Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2023-43687MEDIUMCVSS 6.5EG 6.52025-08-14
An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later). There is a Race condition that leads to code execution because of a lack of locks between file verification and execution.
Map vulnerabilities like CWE-421 to your infrastructure
EchelonGraph correlates every CVE — across CWE-421 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →