#cwe-362

共收录 515 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multipl...

CVE-2026-109279

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed,

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access

CVE-2026-109279

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed,

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-12 发布INFO

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with...

CVE-2026-93694

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the component VideoRoom. This man...

CVE-2026-108830

A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

The ITE IT8xxx2 SHI host-command backend (subsys/mgmt/ec_host_cmd/backends/ec_host_cmd_backend_shi_ite.c) copied the 8-byte host-command request header from the SPI Rx FIFO dire...

CVE-2026-19571

The ITE IT8xxx2 SHI host-command backend (subsys/mgmt/ec_host_cmd/backends/ec_host_cmd_backend_shi_ite.c) copied the 8-b

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service...

CVE-2026-84230

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition r

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a share...

CVE-2026-84230

IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to exec...

CVE-2026-84271

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker w

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade...

CVE-2026-94584

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions befor

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

A race condition vulnerability exists in the request processing logic of the REST management...

CVE-2026-94583

A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper t...

CVE-2026-106500

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/pl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges n...

CVE-2026-56906

In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...

CVE-2026-106426

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via...

CVE-2026-106385

Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social enginee

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox ...

CVE-2026-106377

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the render

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu...

CVE-2026-106255

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside ...

CVE-2026-106238

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the render

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security se...

CVE-2026-106213

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-106201

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file ...

CVE-2026-105773

Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Help

历史摘要 · 未重新核验 · NVD