# Race condition. Timing between concurrent operations that breaks a check. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [TS4500 Tape Library Race Condition](https://agentprime.io/advisories/CVE-2026-19178.md) `CVE-2026-19178` · CVE record: IBM Storage TS4500 Library · CVSS 6.8 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Race condition - [Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance](https://agentprime.io/advisories/CVE-2026-85248.md) `CVE-2026-85248` · CVE record: Apache Software Foundation Apache Camel · CVSS 5.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Race condition - [Race condition in Wheels](https://agentprime.io/advisories/CVE-2026-111449.md) `CVE-2026-111449` · CVE record: Wheels Wheels · CVSS 5.9 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Race condition - [JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked](https://agentprime.io/advisories/GHSA-jwrc-gm9j-263p.md) `GHSA-jwrc-gm9j-263p`, `CVE-2026-102832` · PyPI `jupyterlab` and 2 more: affected `>=4.5.7, <4.5.11 || >=4.6.0, <4.6.4`, fixed in `4.5.11`, `4.6.4` · CVSS 4.2 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Broken access control - [Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant](https://agentprime.io/advisories/GHSA-qjpp-gffx-2wm9.md) `GHSA-qjpp-gffx-2wm9`, `CVE-2026-100394`, `GO-2026-6794` · Go `github.com/nezhahq/nezha`: affected `>=0.0.0-20260628010923-fd31e5f1b0f8, <0.0.0-20260721131105-c893aa57867d`, fixed in `0.0.0-20260721131105-c893aa57867d` · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Memory corruption - [FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module](https://agentprime.io/advisories/GHSA-v3ph-cgqh-r8p5.md) `GHSA-v3ph-cgqh-r8p5`, `CVE-2026-82416`, `GO-2026-6797` · Go `github.com/dunglas/frankenphp`: affected `<1.12.5`, fixed in `1.12.5` · CVSS 7.7 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, CWE-488 - [AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction](https://agentprime.io/advisories/CVE-2026-94621.md) `CVE-2026-94621` · CVE record: aliasvault aliasvault and 3 more · CVSS 6.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Server-side request forgery (SSRF) - [Lychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation](https://agentprime.io/advisories/CVE-2026-57569.md) `CVE-2026-57569` · CVE record: LycheeOrg Lychee · CVSS 2.3 Low · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Server-side request forgery (SSRF) - [Multiple vulnerabilities in bhyve device models](https://agentprime.io/advisories/CVE-2026-101311.md) `CVE-2026-101311` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition - [Multiple vulnerabilities in bhyve device models](https://agentprime.io/advisories/CVE-2026-101310.md) `CVE-2026-101310` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Memory corruption, CWE-126 - [Multiple vulnerabilities in bhyve device models](https://agentprime.io/advisories/CVE-2026-101309.md) `CVE-2026-101309` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition - [TOCTOU race between sound(4) buffer resizing and mmap](https://agentprime.io/advisories/CVE-2026-101308.md) `CVE-2026-101308` · CVE record: FreeBSD FreeBSD · CVSS 5.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition - [vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface](https://agentprime.io/advisories/CVE-2025-68404.md) `CVE-2025-68404` · CVE record: QNAP Systems Inc. QuRouter · CVSS 7.5 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition - [Memory safety bugs in kqueue copy-on-fork implementation](https://agentprime.io/advisories/CVE-2026-58100.md) `CVE-2026-58100` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Memory corruption, Race condition - [Memory safety bugs in kqueue copy-on-fork implementation](https://agentprime.io/advisories/CVE-2026-58099.md) `CVE-2026-58099` · CVE record: FreeBSD FreeBSD · CVSS 7.0 High · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Memory corruption - [BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker](https://agentprime.io/advisories/CVE-2026-102354.md) `CVE-2026-102354` · CVE record: alam00000 bentopdf · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition, Server-side request forgery (SSRF) - [Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86848.md) `CVE-2026-86848` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)](https://agentprime.io/advisories/CVE-2026-86562.md) `CVE-2026-86562` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou](https://agentprime.io/advisories/CVE-2026-93683.md) `CVE-2026-93683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [util-linux mount target TOCTOU allows local privilege escalation](https://agentprime.io/advisories/CVE-2026-53613.md) `CVE-2026-53613` · CVE record: util-linux util-linux · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [util-linux mount hook_owner TOCTOU allows local privilege escalation](https://agentprime.io/advisories/CVE-2026-53612.md) `CVE-2026-53612` · CVE record: util-linux util-linux · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Linux Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62840.md) `CVE-2026-62840` · CVE record: Microsoft Linux 3P (Third Party) Distros · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability](https://agentprime.io/advisories/GHSA-494h-xx7x-5frh.md) `GHSA-494h-xx7x-5frh`, `CVE-2026-70183` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Credential Providers Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-103568.md) `CVE-2026-103568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, Race condition - [Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102211.md) `CVE-2026-102211` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102207.md) `CVE-2026-102207` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-108396.md) `CVE-2026-108396` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-97787.md) `CVE-2026-97787` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96949.md) `CVE-2026-96949` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Servicing Stack Updates Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96939.md) `CVE-2026-96939` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Embedded Mode Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96932.md) `CVE-2026-96932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Broadcast DVR User Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96919.md) `CVE-2026-96919` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Windows Win32 Kernel Subsystem Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-96853.md) `CVE-2026-96853` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows DHCP Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70250.md) `CVE-2026-70250` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Windows Broadcast DVR User Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70122.md) `CVE-2026-70122` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Deployment Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88174.md) `CVE-2026-88174` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85943.md) `CVE-2026-85943` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, Race condition - [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85941.md) `CVE-2026-85941` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Windows Subsystem for Linux Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85879.md) `CVE-2026-85879` · CVE record: Microsoft Windows Subsystem for Linux (WSL2) · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Clipboard User Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85912.md) `CVE-2026-85912` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83899.md) `CVE-2026-83899` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83841.md) `CVE-2026-83841` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Error Reporting Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83750.md) `CVE-2026-83750` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, Race condition - [Windows Modern Device Management (MDM) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-83697.md) `CVE-2026-83697` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Setup Files Cleanup Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83505.md) `CVE-2026-83505` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, CWE-426 - [Windows NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-81971.md) `CVE-2026-81971` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Windows Credential Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69736.md) `CVE-2026-69736` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Win32k Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70288.md) `CVE-2026-70288` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-70075.md) `CVE-2026-70075` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69856.md) `CVE-2026-69856` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69931.md) `CVE-2026-69931` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Microsoft Office Click-To-Run Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-97774.md) `CVE-2026-97774` · CVE record: Microsoft Microsoft 365 Apps for Enterprise · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Autopilot Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96215.md) `CVE-2026-96215` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88146.md) `CVE-2026-88146` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88107.md) `CVE-2026-88107` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87710.md) `CVE-2026-87710` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition - [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85904.md) `CVE-2026-85904` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Microsoft Account Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85329.md) `CVE-2026-85329` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88173.md) `CVE-2026-88173` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption - [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88160.md) `CVE-2026-88160` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .