CWE-362— Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.— MITRE CWE catalog
3,066 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-362page 28 of 62
- CVE-2022-23041HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23040HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23039HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23038HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23037HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-23036HIGHCVSS 7.0EG 7.02022-03-10
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the gr…
- CVE-2022-24525HIGHCVSS 7.0EG 7.02022-03-09
Windows Update Stack Elevation of Privilege Vulnerability
- CVE-2022-24505HIGHCVSS 7.0EG 7.02022-03-09
Windows ALPC Elevation of Privilege Vulnerability
- CVE-2022-24460HIGHCVSS 7.0EG 7.02022-03-09
Tablet Windows User Interface Application Elevation of Privilege Vulnerability
- CVE-2022-23298HIGHCVSS 7.0EG 7.02022-03-09
Windows NT OS Kernel Elevation of Privilege Vulnerability
- CVE-2022-23288HIGHCVSS 7.0EG 7.02022-03-09
Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2022-23283HIGHCVSS 7.0EG 7.02022-03-09
Windows ALPC Elevation of Privilege Vulnerability
- CVE-2021-3640HIGHCVSS 7.0EG 7.02022-03-03
A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sen…
- CVE-2021-3609HIGHCVSS 7.0EG 7.02022-03-03
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the …
- CVE-2022-24114HIGHCVSS 7.0EG 7.02022-02-04
Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287
- CVE-2021-4083HIGHCVSS 7.0EG 7.02022-01-18
A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a …
- CVE-2021-39679HIGHCVSS 7.0EG 7.02022-01-14
In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo…
- CVE-2021-39629HIGHCVSS 7.0EG 7.02022-01-14
In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need…
- CVE-2022-21896HIGHCVSS 7.0EG 7.02022-01-11
Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2021-44733HIGHCVSS 7.0EG 7.02021-12-22
A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.
- CVE-2021-0955HIGHCVSS 7.0EG 7.02021-12-15
In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio…
- CVE-2021-44513HIGHCVSS 7.0EG 7.02021-12-07
Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling.
- CVE-2020-12951HIGHCVSS 7.0EG 7.02021-11-16
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.
- CVE-2021-0688HIGHCVSS 7.0EG 7.02021-10-06
In lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.…
- CVE-2021-30652HIGHCVSS 7.0EG 7.02021-09-08
A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious applica…
- CVE-2021-30786HIGHCVSS 7.0EG 7.02021-09-08
A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.
- CVE-2021-40490HIGHCVSS 7.0EG 7.02021-09-03
A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
- CVE-2021-31004HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5. An application may be able to gain elevated privileges.
- CVE-2021-30996HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30995HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may…
- CVE-2021-30955HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30933HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30923HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30899HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel p…
- CVE-2021-30868HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.
- CVE-2021-30857HIGHCVSS 7.0EG 7.02021-08-24
A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. A malicious application may be able to …
- CVE-2021-0565HIGHCVSS 7.0EG 7.02021-06-22
In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat…
- CVE-2021-0533HIGHCVSS 7.0EG 7.02021-06-21
In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Pr…
- CVE-2021-0532HIGHCVSS 7.0EG 7.02021-06-21
In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Pr…
- CVE-2021-0520HIGHCVSS 7.0EG 7.02021-06-21
In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i…
- CVE-2021-0509HIGHCVSS 7.0EG 7.02021-06-21
In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo…
- CVE-2021-0508HIGHCVSS 7.0EG 7.02021-06-21
In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita…
- CVE-2021-0476HIGHCVSS 7.0EG 7.02021-06-11
In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation…
- CVE-2020-11262HIGHCVSS 7.0EG 7.02021-06-09
A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…
- CVE-2020-11250HIGHCVSS 7.0EG 7.02021-06-09
Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Mus…
- CVE-2020-25668HIGHCVSS 7.0EG 7.02021-05-26
A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
- CVE-2021-32399HIGHCVSS 7.0EG 7.02021-05-10
net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.
- CVE-2021-23133HIGHCVSS 7.0EG 7.02021-04-22
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)…
- CVE-2021-0432HIGHCVSS 7.0EG 7.02021-04-13
In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed…
- CVE-2021-1806HIGHCVSS 7.0EG 7.02021-04-02
A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitr…
Map vulnerabilities like CWE-362 to your infrastructure
EchelonGraph correlates every CVE — across CWE-362 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →