#cwe-362

共收录 515 条相关情报。

← 返回所有主题
漏洞预警2026-06-30 发布INFO

Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (...

CVE-2026-13874

Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive i

历史摘要 · 未重新核验 · NVD

安全公告2026-06-30 发布INFO

Paymenter has race condition in payWithCredit() that enables credit double-spend

CVE-2026-55219

### Summary The credit payment implementation in `app/Livewire/Invoices/Show.php` executes a pessimistic row lock (`lock

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-30 发布INFO

A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a simultaneous bidirectional session disconnect. When the ...

CVE-2026-10654

A race condition in the Zephyr Bluetooth Classic RFCOMM host stack (subsys/bluetooth/host/classic/rfcomm.c) mishandles a

历史摘要 · 未重新核验 · NVD

安全公告2026-06-29 发布INFO

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2...

CVE-2026-43743

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-29 发布INFO

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to cause unexpected syst...

CVE-2026-43743

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS

历史摘要 · 未重新核验 · NVD

安全公告2026-06-28 发布INFO

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream...

CVE-2026-13502

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-28 发布INFO

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/Gr...

CVE-2026-13502

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vuln...

CVE-2026-46732

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resou

历史摘要 · 未重新核验 · NVD

安全公告2026-06-24 发布INFO

OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination

CVE-2026-48708

## Summary OliveTin's template engine uses a **single shared `text/template.Template` instance** (`tpl` package-level v

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-24 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race with PMD migration entries The following race is possible with migration swap e...

CVE-2026-53108

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race with PMD migration entr

来源摘录 · NVD

漏洞预警2026-06-24 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: sctp: disable BH before calling udp_tunnel_xmit_skb() udp_tunnel_xmit_skb() / udp_tunnel6_xmit_skb() are ex...

CVE-2026-53070

In the Linux kernel, the following vulnerability has been resolved: sctp: disable BH before calling udp_tunnel_xmit_skb

来源摘录 · NVD

漏洞预警2026-06-24 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release and pressure write A potential race condition exists between press...

CVE-2026-52991

In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release and pressu

来源摘录 · NVD

漏洞预警2026-06-23 发布INFO

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, two concurrent token-exchange requests using the same OAuth authorization code could each mint a d...

CVE-2026-47386

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, two concurrent token-exchange requests us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-22 发布INFO

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5, a flaw in the handling of recovery codes for app-based ...

CVE-2026-48505

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.11.5 and 5.6.5

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-18 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior to 0.9.2, when updating a one-time pad file, a temporary file is created usi...

CVE-2026-48982

pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior to 0.9.2, when upda

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-18 发布INFO

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model (via XEN_DOMCTL_ioport_mapping), and hence the...

CVE-2026-42487

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the de

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid a...

CVE-2025-13036

An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending request

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template engine uses a single shared text/template.Template instance...

CVE-2026-48708

OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template en

历史摘要 · 未重新核验 · NVD

安全公告2026-06-13 发布INFO

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method....

CVE-2026-54229

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump direc

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-13 发布HIGH

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change o...

CVE-2026-54229

该漏洞存在于 abrt-dbus D-Bus 服务的 ChownProblemDir 方法中。abrt 是自动错误报告工具,用于捕获和分析应用程序崩溃。其 D-Bus 服务提供接口供本地用户触发操作。ChownProblemDir 方法本应

历史摘要 · 未重新核验 · NVD