Race Conditions

Every one of the 591 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Windows Search Remote Code Execution VulnerabilityCVE-2023-36884Microsoft · CVSS 7.5 · 99% likely

   CWE-362

2. Windows Kernel Elevation of Privilege VulnerabilityCVE-2024-30088Microsoft · CVSS 7 · 68% likely

   CWE-367OilRig

3. Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2022-26904Microsoft · CVSS 7 · 17% likely

   CWE-362

4. Microsoft Outlook Security Feature Bypass VulnerabilityCVE-2023-35311Microsoft · CVSS 8.8 · 16% likely

   CWE-367

5. Windows Kernel Elevation of Privilege VulnerabilityCVE-2024-38106Microsoft · CVSS 7 · 6.3% likely

   CWE-591

6. Windows Kernel Elevation of Privilege VulnerabilityCVE-2025-62215Microsoft · CVSS 7 · 4.5% likely

   CWE-362

7. Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityCVE-2023-28229Microsoft · CVSS 7 · 1.7% likely

   CWE-591

8. Windows Themes Remote Code Execution VulnerabilityCVE-2023-38146Microsoft · CVSS 8.8 · 37% likely

   CWE-367

9. Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityCVE-2025-30394Microsoft · CVSS 5.9 · 34% likely

   CWE-591

10. Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary co…CVE-2010-0017Microsoft · 31% likely

    CWE-362

11. Windows Registry Elevation of Privilege VulnerabilityCVE-2024-43452Microsoft · CVSS 7.5 · 30% likely

    CWE-367

12. Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 all…CVE-2007-3091Microsoft · 28% likely

    CWE-362

13. Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote attackers to execute arbitrary code or…CVE-2007-0099Microsoft · 26% likely

    CWE-362

14. Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-21881Microsoft · CVSS 7 · 25% likely

    CWE-362

15. Windows Telephony Server Elevation of Privilege VulnerabilityCVE-2023-36005Microsoft · CVSS 7.5 · 24% likely

    CWE-591

16. Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corrupti…CVE-2010-0489Microsoft · 24% likely

    CWE-362

17. Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify t…CVE-2006-2094Microsoft · 23% likely

    CWE-362

18. Race condition in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to…CVE-2010-2558Microsoft · 21% likely

    CWE-362

19. A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by c…CVE-2003-0813Microsoft · 17% likely

    CWE-367

20. Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors involving…CVE-2011-1257Microsoft · 15% likely

    CWE-362

21. Windows Remote Desktop Services Remote Code Execution VulnerabilityCVE-2025-21309Microsoft · CVSS 8.1 · 15% likely

    CWE-591

22. Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-28220Microsoft · CVSS 8.1 · 15% likely

    CWE-591

23. Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-28219Microsoft · CVSS 8.1 · 15% likely

    CWE-591

24. Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2020-1337Microsoft · CVSS 7.8 · 14% likelycovered by CyberSIXT

    CWE-367Citrus Ransomware1 article1 article this week: Citrus ransomware uses contractor access to breach networks

25. Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a differe…CVE-2015-1743Microsoft · 14% likely

    CWE-367

26. Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow…CVE-2010-0021Microsoft · CVSS 5.9 · 13% likely

    CWE-362

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.