#cwe-367
共收录 358 条相关情报。
← 返回所有主题 漏洞预警2026-06-09 发布INFO
CVE-2026-45487
Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attack
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2026-24065
Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privile
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-09 发布INFO
CVE-2026-2638
A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a loc
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-03 发布INFO
CVE-2025-41259
SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivilege
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-35202
Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2025-64390
A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02. The BD-J (Blu-ray Di
历史摘要 · 未重新核验 · NVD
安全公告2026-06-02 发布INFO
CVE-2026-25260
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-02 发布INFO
CVE-2025-59610
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-spa
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-01 发布INFO
CVE-2026-25260
Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2025-59610
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-spa
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-20454
In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of pr
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-29 发布INFO
CVE-2026-45619
WWBN AVideo is an open source video platform. In 29.0 and earlier, EpgParser.php, plugin/AI/receiveAsync.json.php, and o
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-28 发布MEDIUM
CVE-2026-9796
该漏洞存在于Keycloak的身份验证与管理模块中,具体是由于名称为基础的管理员角色检查存在TOCTOU(Time-of-check to time-of-use)缺陷。拥有`manage-clients`角色的认证管理员能够利用此漏洞,在
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-42336
MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a server-side request forge
历史摘要 · 未重新核验 · NVD
安全公告2026-05-26 发布INFO
CVE-2026-35202
### Summary
The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database alloc
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-26 发布INFO
CVE-2026-24191
NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use iss
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-21 发布INFO
CVE-2026-45208
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-21 发布INFO
CVE-2025-71216
A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local at
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-21 发布INFO
CVE-2025-71215
A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification c
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-21 发布INFO
CVE-2026-7837
A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-pr
历史摘要 · 未重新核验 · NVD