Skip to content

CWE-362 · weakness in Race Conditions

Race Condition

2,718 CVEs · 9 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
9
likely to be exploited
39

Every one of the 2,718 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Windows Search Remote Code Execution VulnerabilityCVE-2023-36884Microsoft · CVSS 7.5 · 99% likely

    Microsoft

  2. Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature…CVE-2016-5195Linux · CVSS 7 · 84% likely

    Linux

  3. Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-21166Google · CVSS 8.8 · 24% likely

    Google

  4. The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local user…CVE-2014-0196Linux · CVSS 5.5 · 20% likely

    Linux

  5. Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2022-26904Microsoft · CVSS 7 · 17% likely

    Microsoft

  6. Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnera…CVE-2020-6820Mozilla · CVSS 8.1 · 7.1% likely

    Mozilla

  7. Windows Kernel Elevation of Privilege VulnerabilityCVE-2025-62215Microsoft · CVSS 7 · 4.5% likely

    Microsoft

  8. crypto: af_alg - Disallow concurrent writes in af_alg_sendmsgCVE-2025-39964Linux · CVSS 7.8 · 1.6% likelycovered by CyberSIXT

    Linux5 articles

  9. A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.CVE-2021-25395Samsung Mobile · CVSS 6.4 · 0.4% likely

    Samsung

  10. OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has b…CVE-2018-15473CVSS 5.9 · 99% likely
  11. Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obta…CVE-2014-022686% likely
  12. An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave s…CVE-2024-27983NodeJS · CVSS 8.2 · 84% likely

    Node.js

  13. A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS…CVE-2022-46689Apple · CVSS 7 · 48% likely

    Apple

  14. Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessi…CVE-2010-529834% likely
  15. In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6…CVE-2020-7457FreeBSD · 33% likely
  16. Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary co…CVE-2010-001731% likely
  17. A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8…CVE-2021-25158Aruba Instant Access Points · 30% likely
  18. Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 all…CVE-2007-309128% likely
  19. Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote attackers to execute arbitrary code or…CVE-2007-009926% likely
  20. Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-21881Microsoft · CVSS 7 · 25% likely

    Microsoft

  21. Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corrupti…CVE-2010-048924% likely
  22. Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify t…CVE-2006-209423% likely
  23. Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow re…CVE-2010-386422% likely
  24. Race condition in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to…CVE-2010-255821% likely
  25. Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. Ho…CVE-2017-100011221% likely
  26. A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-sy…CVE-2018-889718% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in