CWE-367

Medium likelihood

Time-of-check Time-of-use (TOCTOU) Race Condition

Parent: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

704 vulnerabilities with CWE-367
CVE-2023-35378 HIGH
Windows Projected File System - Elevation of Privilege via TOCTOU Race Condition
CVSS 7.0
CVE-2023-28576 MEDIUM
Qualcomm FastConnect and Snapdragon Firmware - Time-of-check Time-of-use Race Condition
CVSS 6.4
CVE-2023-20788 MEDIUM
Android - Use-After-Free via Thermal Race Condition
CVSS 6.4
CVE-2023-20787 MEDIUM
Android - Use-After-Free via Thermal Race Condition
CVSS 6.4
CVE-2023-20785 MEDIUM
Android - Local Privilege Escalation via Audio Bounds Check Race Condition
CVSS 6.4
CVE-2023-26438 MEDIUM
Open-Xchange App Suite - JDK DNS Cache Server-Side Request Forgery
CVSS 4.3
CVE-2023-33832 MEDIUM
IBM Spectrum Protect <8.1.17.0 - DoS
CVSS 6.2
CVE-2023-35311 HIGH KEV
Microsoft 365 Apps and Outlook - Security Feature Bypass via TOCTOU Race Condition
CVSS 8.8
CVE-2023-33156 MEDIUM
Microsoft Defender - Privilege Escalation
CVSS 6.3
CVE-2023-33154 HIGH
Windows Partition Management - Privilege Escalation
CVSS 7.8
CVE-2023-26299 HIGH
HP 260 G4 Desktop Mini Firmware < 2.14 - Time-of-Check Time-of-Use Race Condition
CVSS 7.0
CVE-2023-1295 HIGH
Linux Kernel 5.6-5.11 - Privilege Escalation via io_uring IORING_OP_CLOSE TOCTOU
CVSS 7.8
CVE-2023-32555 HIGH
Trend Micro Apex One < 14.0.12105 - Local Privilege Escalation via TOCTOU Race Condition
CVSS 7.0
CVE-2023-32554 HIGH
Trend Micro Apex One < 14.0.12105 - Time-of-Check Time-of-Use Race Condition
CVSS 7.0
CVE-2023-29337 HIGH
NuGet Client - Remote Code Execution via TOCTOU Race Condition
CVSS 7.1
CVE-2023-25394 HIGH
Videostream 0.5.0 and 0.4.3 - Time-of-check Time-of-use Race Condition in Updater Script
CVSS 7.0
CVE-2023-2007 HIGH
Linux Kernel < 6.0 - Time-of-check Time-of-use Race Condition in DPT I2O Controller Driver
CVSS 7.8
CVE-2023-1586 MEDIUM
Avast <22.11 - Privilege Escalation
CVSS 6.5
CVE-2023-1585 MEDIUM
Avast & AVG Antivirus <22.11 - TOCTOU
CVSS 6.5
CVE-2023-0006 MEDIUM
Palo Alto Networks GlobalProtect < - Privilege Escalation
CVSS 6.3
CVE-2023-0778 MEDIUM
Podman < 4.4.2 - Time-of-check Time-of-use Race Condition via Volume Export
CVSS 6.8
CVE-2023-22883 HIGH
Zoom Meetings < 5.13.5 - Local Privilege Escalation via Installation Process Race Condition
CVSS 7.2
CVE-2023-24861 HIGH
Windows Graphics Component - Privilege Escalation
CVSS 7.0
CVE-2023-23389 MEDIUM
Microsoft Malware Protection Engine - Elevation of Privilege via TOCTOU Race Condition
CVSS 6.3
CVE-2023-20623 MEDIUM
Android - Local Privilege Escalation via Improper Locking in ion
CVSS 6.4
Details
Vulnerabilities 704
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits