Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade)
CVE-2026-71537
### Summary The service downgrade implementation in `app/Livewire/Services/Upgrade.php::doUpgrade()` executes a prorati
#cwe-362
共收录 515 条相关情报。
← 返回所有主题Paymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)
CVE-2026-71537
Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Se
On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured, a race condition in the gNSI Authz service may cause a ...
CVE-2026-73463
On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote...
CVE-2026-91723
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Med...
CVE-2026-91723
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements
In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional...
CVE-2026-58734
In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could
In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges n...
CVE-2026-58728
In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalati
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User...
CVE-2026-58724
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation o
In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privilege...
CVE-2026-58716
In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to loca
In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with System executio...
CVE-2026-58701
In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could l
In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution pri...
CVE-2026-56988
In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead t
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User...
CVE-2026-56964
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation o
In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional exec...
CVE-2026-56923
In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead
In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution priv...
CVE-2026-56915
In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User ...
CVE-2026-55318
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execut
FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a channel pointer after releasing the synchronization lock. ...
CVE-2026-91947
FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that dereferences a c
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, mac...
CVE-2026-84630
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and
A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, m...
CVE-2026-84607
A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 a
A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data.
CVE-2026-84562
A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able t
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, mac...
CVE-2026-84492
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and