CWE-362

Medium likelihood

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Parent: CWE-662 - Improper Synchronization

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

2,392 vulnerabilities with CWE-362
CVE-2022-30198 HIGH
Windows Point-to-Point Tunneling Protocol - Remote Code Execution via Race Condition
CVSS 8.1
CVE-2022-24504 HIGH
Windows Point-to-Point Tunneling Protocol - RCE
CVSS 8.1
CVE-2022-22035 HIGH
Windows Point-to-Point Tunneling Protocol - RCE
CVSS 8.1
CVE-2022-41850 MEDIUM
Linux kernel <5.19.12 - Use After Free
CVSS 4.7
CVE-2022-41849 MEDIUM
Linux kernel <5.19.12 - Use After Free
CVSS 4.2
CVE-2022-41848 MEDIUM
Linux kernel <5.19.12 - Use After Free
CVSS 4.2
CVE-2022-3303 MEDIUM
Linux Kernel < 6.0 - Denial of Service via SNDCTL_DSP_SYNC Ioctl Race Condition
CVSS 4.7
CVE-2022-3071 HIGH
Google Chrome <105.0.5195.52 - Use After Free
CVSS 8.8
CVE-2022-3049 HIGH
Google Chrome <105.0.5195.52 - Use After Free
CVSS 8.8
CVE-2022-3042 HIGH
Google Chrome <105.0.5195.52 - Use After Free
CVSS 8.8
CVE-2022-2857 HIGH
Google Chrome <104.0.5112.101 - Use After Free
CVSS 8.8
CVE-2022-2854 HIGH
Google Chrome <104.0.5112.101 - Use After Free
CVSS 8.8
CVE-2022-40310 MEDIUM
Rate my Post - WP Rating System <= 3.3.4 - Authenticated Race Condition
CVSS 4.3
CVE-2022-39006 MEDIUM
Huawei EMUI and HarmonyOS - Denial of Service via MPTCP Race Condition
CVSS 5.9
CVE-2022-34725 HIGH
Windows ALPC - Elevation of Privilege via Race Condition
CVSS 7.0
CVE-2022-26928 HIGH
Windows Photo Import API - Privilege Escalation
CVSS 7.0
CVE-2022-36422 MEDIUM
Lester 'GaMerZ' Chan WP-PostRatings <1.89 - Info Disclosure
CVSS 4.3
CVE-2022-40307 MEDIUM
Linux Kernel < 5.19.8 - Use-After-Free via Race Condition in EFI Capsule Loader
CVSS 4.7
CVE-2022-26450 MEDIUM
Android - Use-After-Free via Race Condition in apusys
CVSS 6.4
CVE-2022-39188 MEDIUM
Linux Kernel < 5.19 - Race Condition in TLB Handling via unmap_mapping_range
CVSS 4.7
CVE-2022-1729 HIGH
Linux Kernel 3.2.85-3.3 - Unauthenticated Race Condition in perf_event_open()
CVSS 7.0
CVE-2022-3028 HIGH
Linux Kernel 3.14-4.9.326 - Race Condition in XFRM Subsystem via xfrm_probe_algs
CVSS 7.0
CVE-2022-2590 HIGH
Linux Kernel - Privilege Escalation
CVSS 7.0
CVE-2022-1247 HIGH
Linux Kernel - Race Condition in rose_connect()
CVSS 7.0
CVE-2022-2961 HIGH
Linux Kernel - Use-After-Free via PLP Rose Race Condition in bind
CVSS 7.0
Details
Vulnerabilities 2,392
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits