CWE-362

Medium likelihood

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Parent: CWE-662 - Improper Synchronization

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

2,393 vulnerabilities with CWE-362
CVE-2020-25581 HIGH
FreeBSD Race Condition in jail_remove(2)
CVSS 7.5
CVE-2020-35508 MEDIUM
Linux Kernel < 5.12 - Improper Initialization in Process ID Handling
CVSS 4.5
CVE-2020-35451 MEDIUM
Apache Oozie < 5.2.1 - Race Condition in OozieSharelibCLI
CVSS 4.7
CVE-2020-11277 HIGH
Qualcomm PM3003A and related firmware - Race Condition in FastRPC Async Session Handling
CVSS 7.4
CVE-2020-36203 MEDIUM
reffers < 0.6.1 - Data Race and Memory Corruption via ARefss
CVSS 4.7
CVE-2020-11152 MEDIUM
Qualcomm Snapdragon - Race Condition in HAL Layer via HIDL Callback Processing
CVSS 6.4
CVE-2020-11151 MEDIUM
Qualcomm PM3003A and related - Use-After-Free via Race Condition in Video IOCTL
CVSS 6.4
CVE-2020-25533 HIGH
Malwarebytes < 4.0 - Privilege Escalation via XPC PID Validation Race Condition
CVSS 7.0
CVE-2020-17534 HIGH
HTML/Java API <1.7.1 - Privilege Escalation
CVSS 7.0
CVE-2020-16021 HIGH
Google Chrome < 87.0.4280.66 - Race Condition in Image Burner
CVSS 7.5
CVE-2020-35897 MEDIUM
atom < 0.3.6 - Data Race via Unsafe Send Implementation
CVSS 4.7
CVE-2020-35886 MEDIUM
arr < 2020-08-25 - Data Race via Non-Sync/Send Type Smuggling
CVSS 4.7
CVE-2020-35882 HIGH
rocket 0.4.0-0.4.4 - Data Race via LocalRequest::clone
CVSS 8.1
CVE-2020-35874 HIGH
internment crate < 0.4.0 - Use-After-Free via ArcIntern::drop Race Condition
CVSS 8.1
CVE-2020-35871 HIGH
rusqlite < 0.23.0 - Memory Safety Violation via Auxdata API Data Race
CVSS 8.1
CVE-2020-35928 MEDIUM
concread < 0.2.6 - Data Race in ARCache via Non-Send/Sync Types
CVSS 4.7
CVE-2020-35914 MEDIUM
lock_api < 0.4.2 - Data Race via RwLockWriteGuard
CVSS 4.7
CVE-2020-35913 MEDIUM
lock_api < 0.4.2 - Data Race via RwLockReadGuard Unsoundness
CVSS 4.7
CVE-2020-35912 MEDIUM
lock_api < 0.4.2 - Data Race via MappedRwLockWriteGuard
CVSS 4.7
CVE-2020-35911 MEDIUM
lock_api < 0.4.2 - Data Race via MappedRwLockReadGuard
CVSS 4.7
CVE-2020-35905 MEDIUM
futures-util < 0.3.7 - Data Race via MutexGuard::map Closure
CVSS 4.7
CVE-2020-27837 MEDIUM
gnome_display_manager < 3.38.2.1 - Unauthenticated Lock Screen Bypass via Race Condition
CVSS 6.4
CVE-2020-27067 MEDIUM
Android - Use-After-Free via Race Condition in l2tp Subsystem
CVSS 6.4
CVE-2020-0474 HIGH
Android 11 - Use-After-Free in HalCamera::requestNewFrame
CVSS 7.0
CVE-2020-27825 MEDIUM
Linux Kernel - Use-After-Free in Ring Buffer Trace Open
CVSS 5.7
Details
Vulnerabilities 2,393
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits