Race condition.

Windows DCOM Server Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows BitLocker Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Security Center Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Windows Composite Image File System Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• Race condition
• Memory corruption

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Phone Service Elevation of Privilege Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Race condition
• Memory corruption

Windows Performance Monitor Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Print Spooler Components Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Windows Device Association Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Memory corruption
• Race condition

Windows Projected File System Tampering Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition

Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Memory corruption
• Race condition

Windows Overlay Filter Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition

Windows Hyper-V Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition

Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Windows Installer Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Memory corruption
• Race condition

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows SmartScreen Information Disclosure Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Race condition

Windows DHCP Server Remote Code Execution Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition
• Memory corruption

Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Race condition

Windows Storage Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition
• Memory corruption

Windows Storage Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition
• Memory corruption

Windows Storage Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition
• Memory corruption

grant-table: double version change race

• Xen
• Race condition

Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference

• parse-community parse-server
• Race condition

FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit

• FreeRDP
• Race condition

macrozheng mall Coupon Redemption generateOrder race condition

• macrozheng mall
• Race condition

Race condition in the Networking: DNS component

• Mozilla Firefox
• Mozilla Thunderbird
• Race condition

Race condition in the XPCOM component

• Mozilla Firefox
• Mozilla Thunderbird
• Race condition

Race condition, use-after-free in the Graphics: Text component

• Mozilla Firefox
• Mozilla Thunderbird
• Race condition
• Memory corruption

Sandbox escape due to race condition in the Networking component

• Mozilla Firefox
• Mozilla Thunderbird
• Race condition

Race condition, use-after-free in the Graphics: CanvasWebGL component

• Mozilla Firefox
• Mozilla Thunderbird
• Race condition
• Memory corruption

Bluetooth Mesh delayable message queue: unsynchronized list access leads to NULL pointer dereference

• zephyr
• Race condition

Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

• Privasys ra-tls-clients
• Race condition

WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability

• Pixelite Events Manager
• Race condition

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access

• ImageMagick
• Race condition

Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller

• Progress ShareFile Storage Zones Controller
• Hard-coded credentials
• Race condition

meetecho janus-gateway VideoRoom janus_videoroom.c race condition

• meetecho janus-gateway
• Race condition

hyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race Condition

• hyper-mcp
• Race condition

Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker

• Shepherd
• Race condition

Apache CXF: XML Signature wrapping in JAX-RS XML Security

• Apache Software Foundation Apache CXF
• Race condition

Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests

• Apache Software Foundation Apache CXF
• Race condition

Apache CXF: JPA authorization-code consume is non-atomic

• Apache Software Foundation Apache CXF
• Race condition

Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request buffer

• zephyr
• Race condition

A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated c…

• Race condition

HTTP/2 server crash due to HPACK encoder race in net/http

• Race condition

<0.60.0 · fixed in 0.60.0

PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

• Information disclosure
• Authentication bypass

<4.6.78 · fixed in 4.6.78

IBM Guardium Data Protection is affected by multiple vulnerabilities

• IBM Guardium Data Protection
• Race condition

IBM Guardium Data Protection Signature Verification Bypass

• IBM Guardium Data Protection
• Race condition

PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure

• Information disclosure
• Race condition

<1.6.78 · fixed in 1.6.78

WordPress Tutor LMS plugin <= 4.1.1 - Race Condition vulnerability

• Themeum Tutor LMS
• Race condition

Race condition in Brocade Fabric OS

• Brocade Fabric OS
• Race condition

Race condition in Brocade Fabric OS

• Brocade Fabric OS
• Race condition

GnuTLS v3.8.13 does not reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU).

• Race condition

Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)

• Race condition
• Server-side request forgery (SSRF)

>=2.91.0, <2.132.0 · fixed in 2.132.0