CWE-362

Medium likelihood

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Parent: CWE-662 - Improper Synchronization

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

2,529 vulnerabilities with CWE-362
CVE-2026-52991 HIGH
sched/psi: fix race between file release and pressure write
CVSS 7.8
CVE-2026-47386 MEDIUM
NocoDB: OAuth Authorization Code Race Condition
CVE-2026-48505 HIGH
Filament MFA Recovery Codes - Concurrent Reuse Extends Account Access
CVSS 7.4
CVE-2026-48982 MEDIUM
pam_usb < 0.9.2 - One-Time Pad Update Race Condition
CVSS 5.8
CVE-2026-42487 HIGH
x86 HVM I/O port list traversal
CVSS 7.9
CVE-2026-12468 HIGH
Google Chrome < 149.0.7827.155 - Sandbox Escape via Updater Race Condition
CVSS 8.3
CVE-2026-12454 HIGH
Google Chrome - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSS 8.3
CVE-2026-0083 HIGH
Google Android - Use After Free
CVSS 7.0
CVE-2026-0068 HIGH
Android - Local Privilege Escalation via PackageInstallerService Desync
CVSS 7.8
CVE-2026-48708 HIGH
OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination
CVSS 7.5
CVE-2026-54229 HIGH
Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking
CVSS 7.0
CVE-2026-12022 HIGH
Google Chrome - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSS 8.3
CVE-2026-46693 MEDIUM
ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking
CVSS 4.1
CVE-2026-44693 HIGH
Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer
CVSS 8.8
CVE-2026-1220 HIGH
Google Chrome - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSS 7.5
CVE-2026-45603 HIGH
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-45601 HIGH
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-45598 HIGH
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-45597 HIGH
Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-45596 HIGH
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-44818 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVSS 7.0
CVE-2026-42991 HIGH
Microsoft Windows 10 Version 1809 - Windows Push Notifications Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-42979 HIGH
Microsoft Windows 10 Version 1809 - Windows Push Notifications Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-42978 HIGH
Microsoft Windows 10 Version 1809 - Windows Push Notifications Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-42977 HIGH
Microsoft Windows 10 Version 1809 - Windows Push Notifications Elevation of Privilege Vulnerability
CVSS 7.8
Details
Vulnerabilities 2,529
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits