#cwe-367

共收录 358 条相关情报。

← 返回所有主题
漏洞预警2026-07-17 发布INFO

OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the affected feature is enabled and reachable, a lower-trust caller or co...

CVE-2026-62212

OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the affected fea

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

OpenClaw < 2026.5.28 Authentication Bypass via safeFetch

CVE-2026-62212

OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the affected fea

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-16 发布INFO

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation...

CVE-2026-53410

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-16 发布INFO

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user...

CVE-2026-53410

A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Cl

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctls on /dev/dld. drv...

CVE-2026-15449

A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the authoriza...

CVE-2026-53518

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oau

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-15 发布INFO

Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint on the ref...

CVE-2026-53517

Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-a

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking

CVE-2026-53517

Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-a

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-15 发布INFO

Better Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemption

CVE-2026-53518

Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oau

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-15 发布INFO

Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretrained flow can bypass the trust_remote_code guard because dow...

CVE-2026-45804

Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretraine

历史摘要 · 未重新核验 · NVD

安全公告2026-07-15 发布INFO

Diffusers: TOCTOU Trust Remote Code Bypass

CVE-2026-45804

Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretraine

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-14 发布INFO

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition...

CVE-2026-48344

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could resul

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-14 发布INFO

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the curre...

CVE-2026-48344

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could resul

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.

CVE-2026-57973

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perfor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.

CVE-2026-56648

Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

CVE-2026-56178

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to el

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50673

Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.

CVE-2026-50658

Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privile

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local access and with the PROCMGR_AID_TRACE ability, to cause infor...

CVE-2026-4018

TOCTOU Race Condition in specific trace commands of the TraceEvent() system call could allow an attacker with local acce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-13 发布INFO

OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requiring stronger auth...

CVE-2026-62189

OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower

历史摘要 · 未重新核验 · NVD