CWE-362

Medium likelihood

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Parent: CWE-662 - Improper Synchronization

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

2,393 vulnerabilities with CWE-362
CVE-2019-2189 MEDIUM
Android - Local Privilege Escalation via Easel Driver Race Condition
CVSS 6.4
CVE-2019-2188 MEDIUM
Android - Local Privilege Escalation via Easel Driver Race Condition
CVSS 6.4
CVE-2019-11736 HIGH
Mozilla Maintenance Service - Privilege Escalation
CVSS 7.0
CVE-2019-11184 MEDIUM
Intel Xeon E5-2670 Firmware - Authenticated Partial Information Disclosure via DDIO Cache Race Condition
CVSS 4.8
CVE-2019-16354 MEDIUM
Beego 1.10.0 - Session File Exposure via Race Condition in File Session Manager
CVSS 4.7
CVE-2019-11546 MEDIUM
GitLab <11.8.9-11.10.2 - Info Disclosure
CVSS 5.3
CVE-2019-9458 HIGH
Android - Use-After-Free via Video Driver Race Condition
CVSS 7.0
CVE-2019-9450 MEDIUM
Android - Race Condition in FingerTipS Touchscreen Driver
CVSS 6.4
CVE-2019-9271 MEDIUM
Android Kernel mnh Driver - Use-After-Free via Race Condition
CVSS 6.4
CVE-2019-5612 HIGH
FreeBSD Kernel Memory Exposure via /dev/midistat Race Condition
CVSS 7.5
CVE-2019-14694 MEDIUM
Comodo Antivirus 12.0.0.6870 - Use After Free
CVSS 4.7
CVE-2019-2121 HIGH
Android - Local Privilege Escalation via ActivityManagerService Race Condition
CVSS 7.0
CVE-2019-3744 HIGH
Dell/Alienware Digital Delivery < 3.5.2013 - Privilege Escalation via Race Condition
CVSS 7.8
CVE-2019-12263 HIGH
Wind River VxWorks <7 - Buffer Overflow
CVSS 8.1
CVE-2019-7614 MEDIUM
Elasticsearch <7.2.1-6.8.2 - Info Disclosure
CVSS 5.9
CVE-2019-11922 HIGH
Zstandard <1.3.8 - Memory Corruption
CVSS 8.1
CVE-2019-2345 HIGH
Snapdragon Auto/... - Info Disclosure
CVSS 7.0
CVE-2019-2314 HIGH
Qualcomm Snapdragon - Use After Free
CVSS 7.0
CVE-2019-9821 HIGH
Firefox < 67.0 - Use-After-Free via AssertWorkerThread Race Condition
CVSS 8.1
CVE-2019-9818 HIGH
Thunderbird <60.7-Firefox <67-Firefox ESR <60.7 - Use After Free
CVSS 8.3
CVE-2019-2260 HIGH
Qualcomm Snapdragon - Use After Free
CVSS 7.0
CVE-2019-13233 HIGH
Linux Kernel < 5.1.9 - Use-After-Free via Race Condition in LDT Entry Access
CVSS 7.0
CVE-2019-13226 HIGH
deepin-clone < 1.1.3 - Unauthenticated Race Condition via Predictable Mount Path
CVSS 7.0
CVE-2019-6627 MEDIUM
F5 SSL Orchestrator 14.1.0-14.1.0.5 - Denial of Service via Race Condition in SSL Forward Proxy Bypass
CVSS 5.9
CVE-2019-13178 HIGH
Calamares 3.1-3.2.10 - Race Condition in LUKS Boot Keyfile Permissions
CVSS 8.1
Details
Vulnerabilities 2,393
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits