CWE-363 · weakness in Race Conditions
Race Condition Enabling Link Following
12 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.
- Race condition in std::fs::remove_dir_all in rustlang
- runc can be confused to create empty files/directories on the host
- youki container escape via "masked path" abuse due to mount race conditions
- FileInfo can escape from a Root in os
- filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files
- Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability
- filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory
- Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition
- Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability al…
- Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race
- filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses
- HP Image Assistant - Potential Escalation of Privilege
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.