Advisories · Weakness
Race condition.
Timing between concurrent operations that breaks a check. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 4.8 Medium
Race condition in Apple macOS
- Apple macOS
- Race condition
- CVSS 3.1 Low
Race condition in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Race condition
- CVSS 6.5 Medium
Race condition in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Race condition
- CVSS 7.0 High
Race condition in Apple macOS
- Apple macOS
- Race condition
- CVSS 6.3 Medium
Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
- CVSS 4.7 Medium
Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
- CVSS 4.7 Medium
Race condition in Apple macOS
- Apple macOS
- Race condition
- CVSS 7.5 High
Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
- CVSS 5.3 Medium
a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition
- a2aproject a2a-dotnet
- Race condition
- CVSS 3.7 Low
WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability
- VillaTheme Photo Reviews for WooCommerce
- Race condition
- CVSS 5.9 Medium
WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability
- Awesomemotive Easy Digital Downloads
- Race condition
- CVSS 3.7 Low
Cross-session AES key confusion in the Espressif ESP32 hardware crypto driver
- zephyr
- Race condition
- CVSS 8.8 High
TOCTOU Race Condition in boneIO
- boneIO
- Race condition
- CVSS 2.3 Low
MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption
- maccmspro maccms10
- magicblack maccms10
- Race condition
- CVSS 2.1 Low
HaschekSolutions PictShare File Upload core.php architect race condition
- HaschekSolutions PictShare
- Race condition
- CVSS 6.3 Medium
NocoDB Registration users.service.ts race condition
- NocoDB
- Race condition
- CVSS 5.1 Medium
NocoDB Password-Reset Flow users.service.ts race condition
- NocoDB
- Race condition
- CVSS 6.1 Medium
filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name
- Race condition
>=4.1.0, <4.2.1 · fixed in 4.2.1
GHSA-jqc4-5cvw-7w85 · CVE-2026-112937 - CVSS 3.3 Low
filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
- Race condition
>=3.20.4, <4.2.1 · fixed in 4.2.1
GHSA-9vhv-jxww-xfm5 · CVE-2026-112913 - CVSS 5.4 Medium
OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent
- open-reception appointment-booking-software
- Race condition
- CVSS 6.5 Medium
Time-of-check time-of-use race condition in node
- node
- Race condition
- CVSS 6.3 Medium
Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper
- traefik
- Race condition
- CVSS 7.0 High
Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP
- zephyr
- Race condition
- CVSS 4.2 Medium
Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air
- zephyr
- Race condition
- CVSS 8.1 High
Concurrent GSS-TSIG messages corrupt memory
- ISC BIND 9
- Race condition
- Memory corruption
- CVSS 7.5 High
Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service
- Apache Software Foundation Apache bRPC
- Race condition
- CVSS 5.8 Medium
Race condition in `tokio::time::Interval` on Tokio v1.54.0
- Race condition
>=1.54.0, <1.54.1 · fixed in 1.54.1
GHSA-5wjr-9356-4wc8 · CVE-2026-115567 - CVSS 5.3 Medium
a2aproject a2a-rs inmemory.rs update race condition
- a2aproject a2a-rs
- Race condition
- CVSS 6.5 Medium
Race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 6.5 Medium
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 6.5 Medium
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 6.5 Medium
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 6.5 Medium
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 9.6 CriticalCritical · CVSS 9+
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 8.8 High
Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
- CVSS 7.7 High
MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
- Race condition
>=2.0.0, <2.3.0 · fixed in 2.3.0
GHSA-jm63-cq47-j5jp · CVE-2026-111770 - CVSS 9.1 CriticalCritical · CVSS 9+
Apache Tomcat: HTTP/2 request/response mix-up after error during async processing
- Apache Software Foundation Apache Tomcat
- Race condition
- CVSS 8.1 High
Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector
- Apache Software Foundation Apache Tomcat
- Race condition
- CVSS 7.8 High
Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
- CVSS 4.7 Medium
Race condition in Apple macOS
- Apple macOS
- Race condition
- CVSS 4.7 Medium
Race condition in Apple macOS
- Apple macOS
- Race condition