#cwe-362

共收录 515 条相关情报。

← 返回所有主题
漏洞预警2026-09-29 发布INFO

Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-95280

Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 157.

CVE-2026-100805

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 157.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-27 发布INFO

The account recovery (password reset) functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use (TOCTOU) race condition in the consumptio...

CVE-2026-101041

The account recovery (password reset) functionality in the vulnerability-lookup web application contains a time-of-check

历史摘要 · 未重新核验 · NVD

安全公告2026-09-27 发布INFO

Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover

CVE-2026-101041

The account recovery (password reset) functionality in the vulnerability-lookup web application contains a time-of-check

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by loading all folios upfront There are some synchronisation is...

CVE-2026-98118

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by load

来源摘录 · NVD

漏洞预警2026-09-25 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is s...

CVE-2026-98112

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events

来源摘录 · NVD

漏洞预警2026-09-25 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_assign_pointer() for __rcu list updates Several places in net/ipv6/mcast.c update RCU-...

CVE-2026-98099

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_assign_pointer() for __rcu lis

来源摘录 · NVD

安全公告2026-09-24 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19...

CVE-2026-92628

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 1

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-24 发布INFO

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP se...

CVE-2026-92628

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 1

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat allows an attacker to inject trailer fields into anoth...

CVE-2026-77762

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-23 发布INFO

The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects the session but not the caller, so an attacker in Bluetoo...

CVE-2026-96456

The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated device

CVE-2026-96456

The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-22 发布INFO

Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

CVE-2026-77633

## Summary Cloudreve v4 splits the storage-quota **check** (reading the user's `used` bytes and comparing them to `MaxS

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-22 发布INFO

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value th...

CVE-2026-77633

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs

历史摘要 · 未重新核验 · NVD

安全公告2026-09-22 发布INFO

Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

CVE-2026-77633

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-21 发布INFO

The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, secure_storage_its_transform_aead_get_nonce() in subsys/secure_storage/src/its/transform/a...

CVE-2026-15890

The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, secure_storage_its_transform_aead

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of...

CVE-2026-94043

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_d

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布INFO

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_deps/free5gc/NFs/amf/internal/gmm/handler.go of the compon...

CVE-2026-94043

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_d

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

Free5GC Gmm handler.go race condition

CVE-2026-94043

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_d

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-18 发布INFO

Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Services/Upgrade.php::doUpgrade() relies on Service::upgrad...

CVE-2026-71537

Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Se

历史摘要 · 未重新核验 · NVD