CWE-362

Medium likelihood

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Parent: CWE-662 - Improper Synchronization

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

2,529 vulnerabilities with CWE-362
CVE-2026-27911 HIGH
Windows User Interface Core Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-26181 HIGH
Microsoft Brokering File System Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-26174 HIGH
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-26173 HIGH
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-26172 HIGH
Windows Push Notifications Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-26168 HIGH
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-26167 HIGH
Windows Push Notifications Elevation of Privilege Vulnerability
CVSS 8.8
CVE-2026-25184 HIGH
Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-20930 HIGH
Windows Management Services Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-34862 MEDIUM
HarmonyOS - Denial of Service via Power Consumption Statistics Race Condition
CVSS 6.3
CVE-2026-34861 MEDIUM
HarmonyOS - Denial of Service via Thermal Management Module Race Condition
CVSS 6.3
CVE-2026-34858 MEDIUM
Huawei HarmonyOS <6.0.0 - Use After Free
CVSS 4.1
CVE-2026-34857 MEDIUM
Huawei HarmonyOS <6.0.0 - Use After Free
CVSS 4.7
CVE-2026-34849 LOW
Huawei HarmonyOS <6.0.0 - Use After Free
CVSS 2.5
CVE-2026-34856 HIGH
Huawei HarmonyOS <6.0.0 - Use After Free
CVSS 7.3
CVE-2026-34851 LOW
HarmonyOS - Denial of Service via Event Notification Module Race Condition
CVSS 2.2
CVE-2026-34850 LOW
HarmonyOS 5.1.0 and 6.0.0 - Denial of Service via Notification Service Race Condition
CVSS 1.9
CVE-2026-40178 MEDIUM
ajenti.plugin.core <0.112 2FA - Race Condition
CVSS 5.9
CVE-2026-5774 MEDIUM
Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map
CVSS 6.4
CVE-2026-5902 CRITICAL
Google Chrome <147.0.7727.55 - Memory Corruption
CVSS 9.8
CVE-2026-5893 MEDIUM
Google Chrome <147.0.7727.55 - Memory Corruption
CVSS 6.8
CVE-2026-5890 MEDIUM
Google Chrome <147.0.7727.55 - Info Disclosure
CVSS 5.3
CVE-2026-39880 MEDIUM
Remnawave Backend <2.7.5 HWID Device Limit - Race Condition
CVSS 5.0
CVE-2026-35554 HIGH
Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition
CVSS 8.7
CVE-2026-23469 MEDIUM
drm/imagination: Synchronize interrupts before suspending the GPU
CVSS 4.7
Details
Vulnerabilities 2,529
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits