CWE-362

Medium likelihood

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Parent: CWE-662 - Improper Synchronization

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

2,392 vulnerabilities with CWE-362
CVE-2022-0207 MEDIUM
vdsm 4.30.1-4.50.0.3 - Race Condition in Log Obfuscation
CVSS 4.7
CVE-2022-2959 HIGH
Linux Kernel 5.8-5.10.120 - Race Condition in Pipe Buffer Handling
CVSS 7.0
CVE-2022-24951 HIGH
Eternal Terminal < 6.2.0 - Race Condition via IPC Socket Hijacking
CVSS 7.0
CVE-2022-24950 HIGH
Eternal Terminal < 6.2.0 - Authenticated SSH Authorization Socket Hijack via Race Condition in UserTerminalRouter
CVSS 7.5
CVE-2022-24949 HIGH
Eternal Terminal < 6.2.0 - Privilege Escalation via PipeSocketHandler Race Condition
CVSS 7.5
CVE-2022-2623 HIGH
Google Chrome <104.0.5112.79 - Use After Free
CVSS 8.8
CVE-2022-2617 HIGH
Google Chrome <104.0.5112.79 - Use After Free
CVSS 8.8
CVE-2022-2609 HIGH
Google Chrome <104.0.5112.79 - Use After Free
CVSS 8.8
CVE-2022-2608 HIGH
Google Chrome <104.0.5112.79 - Use After Free
CVSS 8.8
CVE-2022-2607 HIGH
Google Chrome <104.0.5112.79 - Use After Free
CVSS 8.8
CVE-2022-20256 MEDIUM
Android 13 - Local Privilege Escalation via Audio HAL Race Condition
CVSS 6.4
CVE-2022-20373 MEDIUM
Android - Use-After-Free via Race Condition in st21nfc_loc_set_polaritymode
CVSS 6.4
CVE-2022-20344 HIGH
Android - Local Privilege Escalation via Race Condition in EventThread.cpp
CVSS 7.0
CVE-2022-35796 HIGH
Microsoft Edge (Chromium-based) - Privilege Escalation
CVSS 7.5
CVE-2022-34702 HIGH
Windows SSTP - Remote Code Execution via Race Condition
CVSS 8.1
CVE-2022-34696 HIGH
Windows Hyper-V - Remote Code Execution via Race Condition
CVSS 7.8
CVE-2022-33636 HIGH
Microsoft Edge Chromium < 104.0.1293.47 - Remote Code Execution
CVSS 8.3
CVE-2022-37035 HIGH
FRRouting 8.3 - Use-After-Free in BGP Packet Processing
CVSS 8.1
CVE-2022-26428 MEDIUM
Android - Local Privilege Escalation via Video Codec Race Condition
CVSS 6.4
CVE-2022-21789 MEDIUM
Android - Local Privilege Escalation via Race Condition in Audio IPI
CVSS 6.4
CVE-2022-2160 MEDIUM
Google Chrome <103.0.5060.53 - Info Disclosure
CVSS 6.5
CVE-2022-34892 HIGH
Parallels Desktop 17.1.1 - Privilege Escalation via Update Mechanism Race Condition
CVSS 7.8
CVE-2022-30214 MEDIUM
Windows Server 2016, 2019, and 2022 - Remote Code Execution via DNS Server Race Condition
CVSS 6.6
CVE-2022-30212 MEDIUM
Windows 10, 11, Server 2016, 2019, 2022 - Information Disclosure via Connected Devices Platform Service Race Condition
CVSS 4.7
CVE-2022-30205 MEDIUM
Windows Group Policy - Elevation of Privilege via Race Condition
CVSS 6.6
Details
Vulnerabilities 2,392
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits