#cwe-367

共收录 358 条相关情报。

← 返回所有主题
漏洞预警2026-06-09 发布INFO

Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-45487

Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privileged helper service. The helper validates connecting XPC c...

CVE-2026-24065

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privile

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-09 发布INFO

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink mani...

CVE-2026-2638

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a loc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-03 发布INFO

SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install unt...

CVE-2025-41259

SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivilege

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has a logic flaw that lets users bypass their assigned limit...

CVE-2026-35202

Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-02 发布INFO

A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Disc Java) sandbox can be escaped through a malformed JAR f...

CVE-2025-64390

A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Di

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input...

CVE-2026-25260

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent...

CVE-2025-59610

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-spa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-01 发布INFO

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

CVE-2026-25260

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

CVE-2025-59610

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-spa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys...

CVE-2026-20454

In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

WWBN AVideo is an open source video platform. In 29.0 and earlier, EpgParser.php, plugin/AI/receiveAsync.json.php, and other locations do not use the $resolvedIP out-param of is...

CVE-2026-45619

WWBN AVideo is an open source video platform. In 29.0 and earlier, EpgParser.php, plugin/AI/receiveAsync.json.php, and o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布MEDIUM

A flaw was found in Keycloak. An authenticated administrator with the `manage-clients` role can exploit a Time-of-check to time-of-use (TOCTOU) vulnerability in the name-based a...

CVE-2026-9796

该漏洞存在于Keycloak的身份验证与管理模块中,具体是由于名称为基础的管理员角色检查存在TOCTOU(Time-of-check to time-of-use)缺陷。拥有`manage-clients`角色的认证管理员能够利用此漏洞,在

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a server-side request forgery (SSRF) bypass in the OSS file service URL fetch functi...

CVE-2026-42336

MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a server-side request forge

历史摘要 · 未重新核验 · NVD

安全公告2026-05-26 发布INFO

Pterodactyl has a database resource limit bypass via race condition in Client API

CVE-2026-35202

### Summary The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database alloc

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-26 发布INFO

NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue. A successful exploit of this vulnerability might lead...

CVE-2026-24191

NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use iss

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must...

CVE-2026-45208

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. ...

CVE-2025-71216

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local at

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on aff...

CVE-2025-71215

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a remote attack...

CVE-2026-7837

A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-pr

历史摘要 · 未重新核验 · NVD