#cwe-362

共收录 516 条相关情报。

← 返回所有主题
漏洞预警2026-05-27 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: hwrng: core - use RCU and work_struct to fix race condition Currently, hwrng_fill is not cleared until the ...

CVE-2026-45949

In the Linux kernel, the following vulnerability has been resolved: hwrng: core - use RCU and work_struct to fix race c

来源摘录 · NVD

漏洞预警2026-05-27 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down context entry When tearing down a context entry, the curr...

CVE-2026-45944

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down c

来源摘录 · NVD

漏洞预警2026-05-27 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ext4: fix e4b bitmap inconsistency reports A bitmap inconsistency issue was observed during stress tests un...

CVE-2026-45942

In the Linux kernel, the following vulnerability has been resolved: ext4: fix e4b bitmap inconsistency reports A bitma

来源摘录 · NVD

漏洞预警2026-05-27 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down PASID entry The Intel VT-d Scalable Mode PASID table entr...

CVE-2026-45894

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down P

来源摘录 · NVD

安全公告2026-05-27 发布INFO

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia...

CVE-2025-46284

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-26 发布INFO

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to gain root privileges.

CVE-2025-46284

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Lumiverse is a full-featured AI chat application. Prior to 0.9.7, consumeNonce() only checks that the module-level variable is set and unexpired. It does not validate any value ...

CVE-2026-44443

Lumiverse is a full-featured AI chat application. Prior to 0.9.7, consumeNonce() only checks that the module-level varia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A...

CVE-2026-24199

NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, in engine/luahandler.go, the sync.RWMutex protecting LoadCommonFunctions is released before L.Push() and ...

CVE-2026-43981

Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, in engine/luahandler.go, the sync.RWMutex protec

历史摘要 · 未重新核验 · NVD

安全公告2026-05-22 发布INFO

ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking

CVE-2026-46693

An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process whe

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-21 发布INFO

A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause a minor s...

CVE-2026-44059

A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain lim

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Undefined behavior may result due to a race condition leading to a use-after-free violation. If...

CVE-2026-5947

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incomi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to vali...

CVE-2026-5947

Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incomi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint. The application downloads the properties of the object pointed by gu...

CVE-2026-42099

Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint. The applica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1...

CVE-2026-23558

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within...

CVE-2026-32848

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free con...

CVE-2026-32848

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

shopper/framework: Race condition on Discount.usage_limit allows silent over-redemption

## Impact `CreateOrderFromCartAction::execute` previously created the `Order` row before checking and incrementing the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, he LDAP and OAuth authentication flows use a TOCTOU (Time-of-C...

CVE-2026-45675

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, he LD

历史摘要 · 未重新核验 · NVD

安全公告2026-05-15 发布INFO

Permission control vulnerability in the web. Impact: Successful exploitation of this...

CVE-2026-41964

Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availabili

历史摘要 · 未重新核验 · GitHub Advisory