#cwe-362

共收录 515 条相关情报。

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to ele...

CVE-2026-83666

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certific

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-81971

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an au

来源摘录 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.

CVE-2026-71347

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center a

来源摘录 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布HIGH

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-70250

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.

来源摘录 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges l...

CVE-2026-103568

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Provid

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-362

漏洞预警2026-10-13 发布INFO

Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-102211

Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privilege

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-102207

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-13 发布INFO

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as ...

CVE-2026-82416

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-488

安全公告2026-10-13 发布INFO

FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

CVE-2026-82416

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362 #cwe-488

漏洞预警2026-10-13 发布INFO

Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactional batch request in...

CVE-2026-109954

Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requ

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-13 发布INFO

FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate concurrently on one ...

CVE-2026-109945

FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONN

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

安全公告2026-10-13 发布INFO

Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference

CVE-2026-109954

Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requ

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362

安全公告2026-10-13 发布INFO

FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit

CVE-2026-109945

FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONN

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362

漏洞预警2026-10-13 发布INFO

Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

CVE-2026-109779

Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-13 发布INFO

Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

CVE-2026-109765

Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布INFO

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and T...

CVE-2026-109719

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Fire

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-416

漏洞预警2026-10-13 发布INFO

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Re...

CVE-2026-109407

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

安全公告2026-10-13 发布INFO

macrozheng mall Coupon Redemption generateOrder race condition

CVE-2026-109407

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-362

漏洞预警2026-10-13 发布INFO

The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one k_work_de...

CVE-2026-19936

The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive

历史摘要 · 未重新核验 · NVD

#cve #cwe-362

漏洞预警2026-10-12 发布INFO

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Condit...

CVE-2026-42689

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Ev

历史摘要 · 未重新核验 · NVD

#cve #cwe-362