#cwe-362

共收录 515 条相关情报。

← 返回所有主题
漏洞预警2026-07-08 发布INFO

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF UnixDomainSocket POSIX peer identity resolution u...

CVE-2026-54778

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-08 发布INFO

Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr...

CVE-2026-15119

Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution

CVE-2026-54778

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/jsx did not isolate context values per request during serv...

CVE-2026-59896

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/j

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

hono/jsx does not isolate context per request, leading to cross-request data disclosure

CVE-2026-59896

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/j

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-08 发布INFO

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper synchronization of channel_callback access. A ma...

CVE-2026-56297

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to

历史摘要 · 未重新核验 · NVD

安全公告2026-07-08 发布INFO

FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback

CVE-2026-56297

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-07 发布INFO

@better-auth/oauth-provider's OAuth authorization-code grant allows concurrent redemption when two token requests race the find-then-delete primitive

CVE-2026-53518

### Am I affected? Users are affected if all of the following are true: - Their project depends on `@better-auth/oauth

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-07 发布INFO

Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption

CVE-2026-53517

### Am I affected? Users are affected if all of the following are true: - Their project depends on `@better-auth/oauth

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-06 发布INFO

mkdir: -m exposes directory with umask perms before chmod (race window)

CVE-2026-35353

The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory wit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-03 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in...

CVE-2026-55945

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-03 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose informat...

CVE-2026-55945

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-

历史摘要 · 未重新核验 · NVD

安全公告2026-07-01 发布INFO

goshs: Share-link ?token=… redemption races past download limit

CVE-2026-50139

# Share-link `?token=…` redemption races past download limit **Ecosystem:** Go **Package:** `goshs.de/goshs/v2` (`githu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-01 发布INFO

A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access unauthorized data from another user.

CVE-2026-5120

A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to ac

历史摘要 · 未重新核验 · NVD

安全公告2026-07-01 发布INFO

Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

CVE-2026-14133

Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-30 发布INFO

Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-14133

Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Race in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-14082

Race in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Race in WebRTC in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-14015

Race in WebRTC in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data vi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via physical acces...

CVE-2026-13905

Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-30 发布INFO

Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML...

CVE-2026-13882

Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process t

历史摘要 · 未重新核验 · NVD