Advisories · Weakness
CWE-366.
Every Advisory and CVE whose sources give the weakness CWE-366, newest first.
- CVSS 7.4 High
Apache Tomcat Native: Client certificate requirements can be down-graded
- Apache Software Foundation Apache Tomcat Native
- CWE-366
- CVSS 8.1 High
ZCC race condition in ZPA tunnel handler
- Zscaler Client Connector
- CWE-366
- CVSS 7.8 High
RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
- Linux kernel
- CWE-366
- CVSS 7.5 High
.NET Framework Denial of Service Vulnerability
- Microsoft .NET Framework 3.5
- Microsoft .NET Framework 3.5 AND 4.7.2
- CWE-366
- CWE-755
- CVSS 6.2 Medium
Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client may call memcmp on in…
- The GNU C Library glibc
- CWE-366
- CVSS 5.9 Medium
Race condition vulnerability in SAP Commerce Cloud
- SAP_SE SAP Commerce Cloud
- CWE-366
- CVSS 5.9 Medium
Outray has a Race Condition in the cli's webapp
- CWE-366
<0.1.5 · fixed in 0.1.5
GHSA-45hj-9x76-wp9g · CVE-2026-22819 - CVSS 9.8 CriticalCritical · CVSS 9+
Mutiple vulnerabilities in the Viridian interface
- Xen
- CWE-366
- CVSS 8.7 High
XZ has a heap-use-after-free bug in threaded .xz decoder
- tukaani-project xz
- Memory corruption
- CWE-366
- CVSS 7.8 High
Ivanti Application Control Engine: A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a…
- Ivanti Application Control Engine
- CWE-366
- CVSS 6.5 Medium
Answer has Race Condition within a Thread in github.com/answerdev/answer
- CWE-366
<1.1.1 · fixed in 1.1.1
GHSA-52h8-c876-989c · CVE-2023-4127 - CVSS 8.8 High
Race condition in Google Chrome
- Google Chrome
- Race condition
- CWE-366
- CVSS 3.1 Low
A race condition vulnerability exists in zenml-io/zenml versions up to and including 0.55.3, which allows for the creation of multiple users with the same username when requests are sent in paralle...
- CWE-366
<0.55.5 · fixed in 0.55.5
GHSA-c546-8jmq-hprj · CVE-2024-2032 - CVSS 7.0 High
Kernel: gsm multiplexing race condition leads to privilege escalation
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- CWE-366
- CVSS 4.7 Medium
Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- CWE-366
- CVSS 6.5 Medium
Race Condition within a Thread in it-novum/openitcockpit
- it-novum/openitcockpit
- CWE-366
-
Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all
- Race condition
- CWE-366
<0.8.0 · fixed in 0.8.0
GHSA-mc8h-8q98-g5hr - CVSS 4.6 Medium
oznetmaster SSharpSmartThreadPool SmartThreadPool.cs race condition
- oznetmaster SSharpSmartThreadPool
- CWE-366
-
linux kernel: A race condition was found the Linux kernel in perf_event_open() which can be exploited…
- linux kernel
- CWE-366
- CVSS 5.9 Medium
Race condition in tokio
- Race condition
- CWE-366
>=0.3.0, <1.5.1 || >=1.6.0, <1.6.3 || >=1.7.0, <1.7.2 || >=1.8.0, <1.8.1 · fixed in 1.5.1, 1.6.3, 1.7.2, 1.8.1
GHSA-2grh-hm3w-w7hv · CVE-2021-38191 - CVSS 9.8 CriticalCritical · CVSS 9+
Synology DiskStation Manager (DSM): Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology…
- Synology DiskStation Manager (DSM)
- CWE-366
- CVSS 5.9 Medium
Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.
- Juniper Networks Junos OS
- CWE-366