# Race condition.

Timing between concurrent operations that breaks a check. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Race condition in Apple macOS](https://agentprime.io/advisories/CVE-2026-112556.md)
  `CVE-2026-112556` · CVE record: Apple macOS · CVSS 4.8 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [Race condition in Apple Safari and others](https://agentprime.io/advisories/CVE-2026-112686.md)
  `CVE-2026-112686` · CVE record: Apple Safari and 4 more · CVSS 3.1 Low · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [Race condition in Apple Safari and others](https://agentprime.io/advisories/CVE-2026-112669.md)
  `CVE-2026-112669` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [Race condition in Apple macOS](https://agentprime.io/advisories/CVE-2026-113900.md)
  `CVE-2026-113900` · CVE record: Apple macOS · CVSS 7.0 High · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [Race condition in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-84634.md)
  `CVE-2026-84634` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [Race condition in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-113896.md)
  `CVE-2026-113896` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [Race condition in Apple macOS](https://agentprime.io/advisories/CVE-2026-112442.md)
  `CVE-2026-112442` · CVE record: Apple macOS · CVSS 4.7 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [Race condition in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-112459.md)
  `CVE-2026-112459` · CVE record: Apple iOS and iPadOS and 3 more · CVSS 7.5 High · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition](https://agentprime.io/advisories/CVE-2026-116476.md)
  `CVE-2026-116476` · CVE record: a2aproject a2a-dotnet · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability](https://agentprime.io/advisories/CVE-2026-111404.md)
  `CVE-2026-111404` · CVE record: VillaTheme Photo Reviews for WooCommerce · CVSS 3.7 Low · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability](https://agentprime.io/advisories/CVE-2026-116403.md)
  `CVE-2026-116403` · CVE record: Awesomemotive Easy Digital Downloads · CVSS 5.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [Cross-session AES key confusion in the Espressif ESP32 hardware crypto driver](https://agentprime.io/advisories/CVE-2026-82390.md)
  `CVE-2026-82390` · CVE record: zephyrproject zephyr · CVSS 3.7 Low · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [TOCTOU Race Condition in boneIO](https://agentprime.io/advisories/CVE-2026-77059.md)
  `CVE-2026-77059` · CVE record: boneIO boneIO · CVSS 8.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption](https://agentprime.io/advisories/CVE-2026-116215.md)
  `CVE-2026-116215` · CVE record: maccmspro maccms10 and 1 more · CVSS 2.3 Low · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [HaschekSolutions PictShare File Upload core.php architect race condition](https://agentprime.io/advisories/CVE-2026-116263.md)
  `CVE-2026-116263` · CVE record: HaschekSolutions PictShare · CVSS 2.1 Low · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [NocoDB Registration users.service.ts race condition](https://agentprime.io/advisories/CVE-2026-116121.md)
  `CVE-2026-116121` · CVE record: NocoDB · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [NocoDB Password-Reset Flow users.service.ts race condition](https://agentprime.io/advisories/CVE-2026-116119.md)
  `CVE-2026-116119` · CVE record: NocoDB · CVSS 5.1 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Race condition
- [filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-\* link directory name](https://agentprime.io/advisories/GHSA-jqc4-5cvw-7w85.md)
  `GHSA-jqc4-5cvw-7w85`, `CVE-2026-112937` · PyPI `filelock`: affected `>=4.1.0, <4.2.1`, fixed in `4.2.1` · CVSS 6.1 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Race condition
- [filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database](https://agentprime.io/advisories/GHSA-9vhv-jxww-xfm5.md)
  `GHSA-9vhv-jxww-xfm5`, `CVE-2026-112913` · PyPI `filelock`: affected `>=3.20.4, <4.2.1`, fixed in `4.2.1` · CVSS 3.3 Low · Not analysed yet · Published 23 Oct 2026 · Tags: Race condition
- [OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent](https://agentprime.io/advisories/CVE-2026-75524.md)
  `CVE-2026-75524` · CVE record: open-reception appointment-booking-software · CVSS 5.4 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in node](https://agentprime.io/advisories/CVE-2026-105481.md)
  `CVE-2026-105481` · CVE record: nodejs node · CVSS 6.5 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Race condition
- [Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper](https://agentprime.io/advisories/CVE-2026-114641.md)
  `CVE-2026-114641` · CVE record: traefik traefik · CVSS 6.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Race condition
- [Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP](https://agentprime.io/advisories/CVE-2026-78118.md)
  `CVE-2026-78118` · CVE record: zephyrproject zephyr · CVSS 7.0 High · Not analysed yet · Published 21 Oct 2026 · Tags: Race condition
- [Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air](https://agentprime.io/advisories/CVE-2026-78117.md)
  `CVE-2026-78117` · CVE record: zephyrproject zephyr · CVSS 4.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Race condition
- [Concurrent GSS-TSIG messages corrupt memory](https://agentprime.io/advisories/CVE-2026-94300.md)
  `CVE-2026-94300` · CVE record: ISC BIND 9 · CVSS 8.1 High · Not analysed yet · Published 21 Oct 2026 · Tags: Race condition, Memory corruption
- [Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service](https://agentprime.io/advisories/CVE-2026-82942.md)
  `CVE-2026-82942` · CVE record: Apache Software Foundation Apache bRPC · CVSS 7.5 High · Not analysed yet · Published 21 Oct 2026 · Tags: Race condition
- [Race condition in \`tokio::time::Interval\` on Tokio v1.54.0](https://agentprime.io/advisories/GHSA-5wjr-9356-4wc8.md)
  `GHSA-5wjr-9356-4wc8`, `CVE-2026-115567`, `RUSTSEC-2026-0384` · crates.io `tokio`: affected `>=1.54.0, <1.54.1`, fixed in `1.54.1` · CVSS 5.8 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Race condition
- [a2aproject a2a-rs inmemory.rs update race condition](https://agentprime.io/advisories/CVE-2026-113707.md)
  `CVE-2026-113707` · CVE record: a2aproject a2a-rs · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113237.md)
  `CVE-2026-113237` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113038.md)
  `CVE-2026-113038` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113103.md)
  `CVE-2026-113103` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113052.md)
  `CVE-2026-113052` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113008.md)
  `CVE-2026-113008` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113233.md)
  `CVE-2026-113233` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113282.md)
  `CVE-2026-113282` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113064.md)
  `CVE-2026-113064` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113136.md)
  `CVE-2026-113136` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113041.md)
  `CVE-2026-113041` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113016.md)
  `CVE-2026-113016` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113329.md)
  `CVE-2026-113329` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113076.md)
  `CVE-2026-113076` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113335.md)
  `CVE-2026-113335` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113218.md)
  `CVE-2026-113218` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113115.md)
  `CVE-2026-113115` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113059.md)
  `CVE-2026-113059` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113112.md)
  `CVE-2026-113112` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113196.md)
  `CVE-2026-113196` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113333.md)
  `CVE-2026-113333` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113239.md)
  `CVE-2026-113239` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113164.md)
  `CVE-2026-113164` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113078.md)
  `CVE-2026-113078` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113311.md)
  `CVE-2026-113311` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113150.md)
  `CVE-2026-113150` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-113141.md)
  `CVE-2026-113141` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another](https://agentprime.io/advisories/GHSA-jm63-cq47-j5jp.md)
  `GHSA-jm63-cq47-j5jp`, `CVE-2026-111770` · npm `@modelcontextprotocol/server`: affected `>=2.0.0, <2.3.0`, fixed in `2.3.0` · CVSS 7.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Apache Tomcat: HTTP/2 request/response mix-up after error during async processing](https://agentprime.io/advisories/CVE-2026-101356.md)
  `CVE-2026-101356` · CVE record: Apache Software Foundation Apache Tomcat · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector](https://agentprime.io/advisories/CVE-2026-80353.md)
  `CVE-2026-80353` · CVE record: Apache Software Foundation Apache Tomcat · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-86961.md)
  `CVE-2026-86961` · CVE record: Apple iOS and iPadOS and 1 more · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Apple macOS](https://agentprime.io/advisories/CVE-2026-86915.md)
  `CVE-2026-86915` · CVE record: Apple macOS · CVSS 4.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition
- [Race condition in Apple macOS](https://agentprime.io/advisories/CVE-2026-65372.md)
  `CVE-2026-65372` · CVE record: Apple macOS · CVSS 4.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Race condition

Newest: <https://agentprime.io/advisories/tag/race-condition.md>
Older: <https://agentprime.io/advisories/tag/race-condition.md?cursor=WyIyMDI2LTEwLTIwVDAwOjUwOjIwLjU0NjAwMFoiLCJDVkUtMjAyNi02NTM3MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=race-condition&cursor=WyIyMDI2LTEwLTI2VDIwOjM3OjUzLjQ2ODAwMFoiLCJDVkUtMjAyNi0xMTI1MDEiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/race-condition/?cursor=WyIyMDI2LTEwLTI2VDIwOjM3OjUzLjQ2ODAwMFoiLCJDVkUtMjAyNi0xMTI1MDEiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.