CWE-367
Medium likelihoodTime-of-check Time-of-use (TOCTOU) Race Condition
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
649 vulnerabilities with CWE-367
CVE-2025-48001
MEDIUM
Windows BitLocker Security Feature Bypass via TOCTOU Race Condition
CVSS 6.8
CVE-2025-38217
MEDIUM
Linux Kernel 6.3-6.6.94, 6.7-6.12.34, 6.13-6.15.3 - Time-of-check Time-of-use Race Condition in fts_read()
CVSS 4.7
CVE-2025-38112
MEDIUM
Linux Kernel - Time-of-check Time-of-use Race Condition in sk_is_readable()
CVSS 4.7
CVE-2025-46415
LOW
Nix/Lix/Guix <2.24.15/2.26.4/2.28.4/2.29.1 - Info Disclosure
CVSS 3.2
CVE-2025-6217
LOW
PEAK-System Driver - Info Disclosure
CVSS 2.5
CVE-2025-3464
HIGH
ASUS Armoury Crate 5.9.9.0-6.1.18 - Authentication Bypass via TOCTOU Race Condition
CVE-2025-21485
HIGH
Qualcomm FastConnect 6900 Firmware - Memory Corruption via FastRPC INIT and Multimode Invoke IOCTL
CVSS 7.8
CVE-2025-46805
MEDIUM
Screen <5.0.0 - Privilege Escalation
CVSS 5.5
CVE-2025-34027
CRITICAL
Versa Concerto 12.1.2-12.2.0 - RCE via Traefik Auth Bypass and TOCTOU Race
CVE-2025-47290
MEDIUM
containerd 2.1.0 - Time-of-check Time-of-use Race Condition during Image Unpacking
CVSS 5.9
CVE-2025-30663
HIGH
Zoom Workplace Apps < 6.4.0 - Authenticated Privilege Escalation via TOCTOU Race Condition
CVSS 8.8
CVE-2025-20082
HIGH
Intel(R) Server D50DNP/M50FCP - Privilege Escalation
CVSS 7.5
CVE-2025-29969
HIGH
Windows Fundamentals - Code Injection
CVSS 7.5
CVE-2025-29833
HIGH
Windows Virtual Machine Bus - Code Injection
CVSS 7.7
CVE-2025-46336
MEDIUM
Rack::Session <2.1.1 - Privilege Escalation
CVSS 4.2
CVE-2025-30101
MEDIUM
Dell PowerScale OneFS <9.10.1.0 - DoS
CVSS 4.4
CVE-2025-32441
MEDIUM
Rack < 2.2.14 - Unauthenticated Session Restoration via Race Condition in Rack::Session::Pool
CVSS 4.2
CVE-2025-3599
MEDIUM
Symantec Eraser Engine < 119.1.7.8 - Elevation of Privilege via TOCTOU Race Condition
CVSS 6.5
CVE-2025-46328
LOW
Snowflake-Connector-NodeJS <2.0.4 - Privilege Escalation
CVSS 3.3
CVE-2025-46327
LOW
gosnowflake <1.13.3 - Info Disclosure
CVSS 3.3
CVE-2025-46326
LOW
Snowflake Connector <4.4.1 - Info Disclosure
CVSS 3.3
CVE-2025-22060
MEDIUM
Linux Kernel 3.17-6.14.1 - TCAM/SRAM Time-of-check Time-of-use Race Condition
CVSS 4.7
CVE-2025-32784
HIGH
conda-forge-webservices <2025.4.10 - TOCTOU
CVE-2025-27812
HIGH
MSI Center <2.0.52.0 - Privilege Escalation
CVSS 8.1
CVE-2025-21191
HIGH
Windows 10 1507-24H2 and Windows Server 2008 - Privilege Escalation via LSA TOCTOU Race Condition
CVSS 7.0
Details
Vulnerabilities
649
Exploit Likelihood
Medium