CWE-364 · weakness in Race Conditions
Signal Handler Race Condition
17 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 2
Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.
- Openssh: regresshion - race condition in ssh allows rce/dos
- Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
- OpenSSH pre-authentication async signal safety issue
- Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
- Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.
- Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticate…
- web_webview has a Race Condition vulnerability
- Eclipse OpenJ9 possible infinite busy hang
- Concurrency and locking defects in GSS-TSIG
- It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing…
- A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An…
- bpf: Free reuseport cBPF prog after RCU grace period.
- zram: fix use-after-free in zram_bvec_write_partial()
- ALSA: aloop: Fix peer runtime UAF during format-change stop
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
- multimedia_audio_framework has a Race Condition vulnerability
- kernel_linux_common_modules has a Race Condition vulnerability
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.