Race condition.

TS4500 Tape Library Race Condition

• IBM Storage TS4500 Library
• Race condition

Apache Camel: Camel-PQC Signature Verification Bypass via a Shared Unsynchronized Signature Instance

• Apache Software Foundation Apache Camel
• Race condition

Race condition in Wheels

• Wheels
• Race condition

JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked

• Race condition
• Broken access control

>=4.5.7, <4.5.11 || >=4.6.0, <4.6.4 · fixed in 4.5.11, 4.6.4

Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant

• Race condition
• Memory corruption

>=0.0.0-20260628010923-fd31e5f1b0f8, <0.0.0-20260721131105-c893aa57867d · fixed in 0.0.0-20260721131105-c893aa57867d

FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

• Race condition
• CWE-488

<1.12.5 · fixed in 1.12.5

AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction

• aliasvault
• ghcr.io/aliasvault/aliasvault
• Race condition
• Server-side request forgery (SSRF)

Lychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation

• Lychee
• Race condition
• Server-side request forgery (SSRF)

Multiple vulnerabilities in bhyve device models

• FreeBSD
• Race condition

Multiple vulnerabilities in bhyve device models

• FreeBSD
• Race condition
• Memory corruption

Multiple vulnerabilities in bhyve device models

• FreeBSD
• Race condition

TOCTOU race between sound(4) buffer resizing and mmap

• FreeBSD
• Race condition

vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface

• QNAP Systems Inc. QuRouter
• Race condition

Memory safety bugs in kqueue copy-on-fork implementation

• FreeBSD
• Memory corruption
• Race condition

Memory safety bugs in kqueue copy-on-fork implementation

• FreeBSD
• Race condition
• Memory corruption

BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker

• alam00000 bentopdf
• Race condition
• Server-side request forgery (SSRF)

Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Race condition

Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Race condition

Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Race condition

util-linux mount target TOCTOU allows local privilege escalation

• util-linux
• Race condition

util-linux mount hook_owner TOCTOU allows local privilege escalation

• util-linux
• Race condition

Linux Kernel Elevation of Privilege Vulnerability

• Microsoft Linux 3P (Third Party) Distros
• Race condition

Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability

• Race condition

>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

Windows Credential Providers Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Memory corruption
• Race condition

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Windows Kernel Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition

Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Race condition

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Servicing Stack Updates Elevation of Privilege Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Race condition

Windows Embedded Mode Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition
• Memory corruption

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows DHCP Client Remote Code Execution Vulnerability

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 (Server Core installation)
• Race condition
• Memory corruption

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• Race condition

Windows Deployment Services Remote Code Execution Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Memory corruption
• Race condition

Windows Installer Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Windows Subsystem for Linux Elevation of Privilege Vulnerability

• Microsoft Windows Subsystem for Linux (WSL2)
• Race condition

Clipboard User Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Installer Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Win32k Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition

Windows Error Reporting Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Memory corruption
• Race condition

Windows Modern Device Management (MDM) Tampering Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• CWE-426

Windows NTFS Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Windows Credential Manager Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Win32k Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition

Windows Storage Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition
• Memory corruption

Windows Storage Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition
• Memory corruption

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

• Microsoft 365 Apps for Enterprise
• Race condition

Windows Autopilot Elevation of Privilege Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Race condition

Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition
• Memory corruption

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Race condition
• Memory corruption

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition

Windows Device Association Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Microsoft Account Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition
• Memory corruption

Microsoft Windows Search Component Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Race condition