Advisories · Weakness
CWE-364.
Every Advisory and CVE whose sources give the weakness CWE-364, newest first.
- CVSS 7.8 High
zram: fix use-after-free in zram_bvec_write_partial()
- Linux kernel
- CWE-364
- CVSS 7.8 High
bpf: Free reuseport cBPF prog after RCU grace period.
- Linux kernel
- Memory corruption
- CWE-364
- CVSS 7.8 High
ALSA: aloop: Fix peer runtime UAF during format-change stop
- Linux kernel
- Memory corruption
- CWE-364
- CVSS 5.9 Medium
Concurrency and locking defects in GSS-TSIG
- PowerDNS Authoritative
- CWE-364
- CVSS 3.3 Low
kernel_linux_common_modules has a Race Condition vulnerability
- OpenHarmony
- CWE-364
- CVSS 5.5 Medium
multimedia_audio_framework has a Race Condition vulnerability
- OpenHarmony
- CWE-364
- CVSS 8.1 High
web_webview has a Race Condition vulnerability
- OpenHarmony
- CWE-364
- CVSS 7.8 High
can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
- Linux kernel
- Memory corruption
- CWE-364
- CVSS 7.5 High
Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks
- Memory corruption
- CWE-364
<38.8.6 || >=39.0.0-alpha.1, <39.8.0 || >=40.0.0-alpha.1, <40.7.0 || >=41.0.0-alpha.1, <41.0.0-beta.8 · fixed in 38.8.6, 39.8.0, 40.7.0, 41.0.0-beta.8
GHSA-8337-3p73-46f4 · CVE-2026-34771 - CVSS 7.5 High
Race condition, use-after-free in the Graphics: WebRender component
- Mozilla Firefox
- Mozilla Thunderbird
- Race condition
- Memory corruption
- CVSS 6.5 Medium
Strapi core vulnerable to sensitive data exposure via CORS misconfiguration
- Information disclosure
- Broken access control
<5.20.0 · fixed in 5.20.0
GHSA-9329-mxxw-qwf8 · CVE-2025-53092 - CVSS 4.7 Medium
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- CWE-364
- CVSS 8.1 High
OpenSSH pre-authentication async signal safety issue
- FreeBSD
- CWE-364
- CVSS 7.0 HighCritical · CVSS 7+ and EPSS
Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- CWE-364
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Openssh: regresshion - race condition in ssh allows rce/dos
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- CWE-364
- CVSS 4.1 Medium
Eclipse OpenJ9 possible infinite busy hang
- Eclipse Foundation OpenJ9
- CWE-364
- CVSS 7.5 High
Mitsubishi Electric India GC-ENET-COM: Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM…
- Mitsubishi Electric India GC-ENET-COM
- CWE-364
-
It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing regression.
- Wildfly
- CWE-364
- CVSS 5.5 Medium
Red Hat wildfly: A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users…
- Red Hat wildfly
- CWE-364
- CVSS 5.4 Medium
Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
- CWE-364