CWE-362— Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.— MITRE CWE catalog
3,068 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-362page 39 of 62
- CVE-2024-54122MEDIUMCVSS 6.2EG 6.22024-12-12
Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2024-51515MEDIUMCVSS 6.2EG 6.22024-11-05
Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.
- CVE-2023-3108MEDIUMCVSS 6.2EG 6.22023-07-11
A flaw was found in the subsequent get_user_pages_fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/algif_skcipher.c function. This flaw allows a local user to crash the system.
- CVE-2019-3016MEDIUMCVSS 6.2EG 6.22020-01-31
In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux…
- CVE-2016-0764MEDIUMCVSS 6.2EG 6.22017-07-17
Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obt…
- CVE-2015-8767MEDIUMCVSS 6.2EG 6.22016-02-08
net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a crafted sctp_accept call.
- CVE-2026-28544MEDIUMCVSS 4.7EG 6.22026-03-05
Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2022-25822MEDIUMCVSS 4.0EG 6.22022-03-10
An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash.
- CVE-2015-3339MEDIUMCVSS v2 6.2EG 6.22015-05-27
Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is ch…
- CVE-2012-3511MEDIUMCVSS v2 6.2EG 6.22012-10-04
Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of service (use-after-free and system crash) via vectors involving a (1) munmap or (2) close syste…
- CVE-2012-3483MEDIUMCVSS v2 6.2EG 6.22012-08-26
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file.
- CVE-2010-5184MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malwa…
- CVE-2010-5183MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-bas…
- CVE-2010-5182MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in VirusBuster Internet Security Suite 3.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malw…
- CVE-2010-5180MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in VBA32 Personal 3.12.12.4 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, …
- CVE-2010-5179MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Trend Micro Internet Security Pro 2010 17.50.1647.0000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signa…
- CVE-2010-5178MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in ThreatFire 4.7.0.17 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via c…
- CVE-2010-5177MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Sophos Endpoint Security and Control 9.0.5 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based m…
- CVE-2010-5176MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Security Shield 2010 13.0.16.313 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware det…
- CVE-2010-5174MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Prevx 3.0.5.143 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certa…
- CVE-2010-5173MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in PC Tools Firewall Plus 6.0.0.88 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware dete…
- CVE-2010-5172MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Panda Internet Security 2010 15.01.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malwar…
- CVE-2010-5171MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Outpost Security Suite Pro 6.7.3.3063.452.0726 and 7.0.3330.505.1221 BETA on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but n…
- CVE-2010-5170MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Online Solutions Security Suite 1.5.14905.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based …
- CVE-2010-5168MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Symantec Norton Internet Security 2010 17.5.0.127 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-…
- CVE-2010-5167MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Norman Security Suite PRO 8.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detect…
- CVE-2010-5166MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malwar…
- CVE-2010-5165MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Malware Defender 2.6.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, vi…
- CVE-2010-5163MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Kaspersky Internet Security 2010 9.0.0.736 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based m…
- CVE-2010-5162MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in G DATA TotalCare 2010 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via…
- CVE-2010-5161MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in F-Secure Internet Security 2010 10.00 build 246 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-ba…
- CVE-2010-5158MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in DefenseWall Personal Firewall 3.00 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware d…
- CVE-2010-5157MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Comodo Internet Security before 4.1.149672.916 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-bas…
- CVE-2010-5156MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in CA Internet Security Suite Plus 2010 6.0.0.272 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-bas…
- CVE-2010-5155MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, …
- CVE-2010-5154MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in BitDefender Total Security 2010 13.0.20.347 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based …
- CVE-2010-5152MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in AVG Internet Security 9.0.791 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detect…
- CVE-2010-5151MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in avast! Internet Security 5.0.462 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware det…
- CVE-2010-5150MEDIUMCVSS v2 6.2EG 6.22012-08-25
Race condition in 3D EQSecure Professional Edition 4.2 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware…
- CVE-2010-4012MEDIUMCVSS v2 6.2EG 6.22010-12-08
Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button.
- CVE-2010-0732MEDIUMCVSS v2 6.2EG 6.22010-03-19
gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proxim…
- CVE-2009-2836MEDIUMCVSS v2 6.2EG 6.22009-11-10
Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vecto…
- CVE-2007-1741MEDIUMCVSS v2 6.2EG 6.22007-04-13
Multiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file validation, and their usage, allow local users to gain privileges and execute arbitrary code by renaming directories or performing symlink at…
- CVE-2006-5178MEDIUMCVSS v2 6.2EG 6.22006-10-10
Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the open_basedir check a…
- CVE-2006-4801MEDIUMCVSS v2 6.2EG 6.22006-09-14
Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are executed with raised privileges.
- CVE-2000-0864MEDIUMCVSS v2 6.2EG 6.22000-11-14
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack.
- CVE-2026-60161MEDIUMCVSS 6.1EG 6.12026-07-21
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastruc…
- CVE-2025-64118MEDIUMCVSS 6.1EG 6.12025-10-30
node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fi…
- CVE-2024-40887MEDIUMCVSS 6.1EG 6.12025-02-12
Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
- CVE-2024-54102MEDIUMCVSS 6.1EG 6.12024-12-12
Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Map vulnerabilities like CWE-362 to your infrastructure
EchelonGraph correlates every CVE — across CWE-362 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →