共收录 516 条相关情报。
← 返回所有主题CVE-2026-41964
Permission control vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availabili
CVE-2026-45675
## Summary The LDAP and OAuth authentication flows use a TOCTOU (Time-of-Check-Time-of-Use) pattern for first-user admi
CVE-2026-8520
Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox esc
CVE-2026-42594
Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the webhook middleware spawns a goroutine th
CVE-2026-28379
A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concur
CVE-2026-34351
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an
CVE-2026-34345
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio
CVE-2026-34342
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Com
CVE-2026-34337
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-34334
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an
CVE-2026-34331
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all
CVE-2026-33839
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all
CVE-2026-32161
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Minip
CVE-2026-45090
## Summary `ParameterAnalysis` in `pkg/scanning/parameterAnalysis.go` runs two sequential worker stages that both write
CVE-2026-44318
### Summary free5GC's BSF `PUT /nbsf-management/v1/subscriptions/{subId}` handler has an unsynchronized write on the glo
CVE-2026-43353
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue Th
CVE-2026-42594
## Summary The webhook middleware spawns a goroutine that holds a reference to the request's `echo.Context` after the s
CVE-2026-43239
In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in ->query_interfaces()
CVE-2026-43215
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tcon fields We used to
CVE-2026-43930
### Impact A race condition in the MFA SMS one-time password (OTP) login path allows two concurrent `/login` requests c