#cwe-362

共收录 515 条相关情报。

← 返回所有主题

漏洞预警2026-10-21 发布INFO

The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet descriptor in a file-scope variable, static cy_stc_ble_hc...

CVE-2026-78117

The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

安全公告2026-10-21 发布INFO

Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP

CVE-2026-78118

The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362

安全公告2026-10-21 发布INFO

Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air

CVE-2026-78117

The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362

漏洞预警2026-10-21 发布HIGH

A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process (denial of service) when RDMA is enabled at build time an...

CVE-2026-82942

A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-10-21 发布MEDIUM

A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file a2a-server/src/task_store/inmemo...

CVE-2026-113707

A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskS

来源摘录 · NVD

#cve #cwe-362

安全公告2026-10-20 发布INFO

MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another

CVE-2026-111770

### Summary In affected versions, an MCP server reached over HTTP could deliver one client's responses and notifications

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-362 #severity:high

漏洞预警2026-10-20 发布INFO

Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between user...

CVE-2026-101356

Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlet

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-20 发布INFO

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its san...

CVE-2026-86961

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gat

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-20 发布MEDIUM

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.

CVE-2026-86915

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-10-20 发布INFO

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able...

CVE-2026-65372

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

安全公告2026-10-20 发布INFO

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker...

CVE-2026-19178

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized adm

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-362 #severity:medium

漏洞预警2026-10-19 发布INFO

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

CVE-2026-19178

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized adm

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-14 发布MEDIUM

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesenti...

CVE-2026-100394

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11,

来源摘录 · NVD

#cve #cwe-362 #cwe-476

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attack...

CVE-2026-88146

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intell

来源摘录 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88107

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85941

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows

来源摘录 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85357

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service all

来源摘录 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges loc...

CVE-2026-83868

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Drive

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-83738

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

来源摘录 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布HIGH

Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-83722

Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges

来源摘录 · NVD

#cve #cwe-362 #cwe-416