Skip to content

CWE-364 · weakness in Race Conditions

Signal Handler Race Condition

17 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

likely to be exploited
2

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

  1. Openssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Red Hat · CVSS 8.1 · 100% likely

    Red Hat

  2. Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9CVE-2024-6409Siemens · CVSS 7 · 28% likely

    Siemens

  3. OpenSSH pre-authentication async signal safety issueCVE-2024-7589FreeBSD · CVSS 8.1 · 2.0% likely

    FreeBSD

  4. Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpCVE-2025-4598Red Hat · CVSS 4.7 · 1.3% likely

    Red Hat

  5. Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.CVE-1999-0035CVSS 5.4 · 0.8% likely
  6. Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticate…CVE-2023-1285Mitsubishi Electric India · CVSS 7.5 · 0.7% likely
  7. web_webview has a Race Condition vulnerabilityCVE-2026-24792OpenHarmony · CVSS 8.1 · 0.4% likely

    OpenHarmony

  8. Eclipse OpenJ9 possible infinite busy hangCVE-2023-5676Eclipse Foundation · CVSS 4.1 · 0.4% likely

    Eclipse Foundation

  9. Concurrency and locking defects in GSS-TSIGCVE-2026-42002PowerDNS · CVSS 5.9 · 0.3% likely

    PowerDNS

  10. It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing…CVE-2020-14317Wildfly · 0.2% likely
  11. A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An…CVE-2019-3805Red Hat · CVSS 5.5 · 0.2% likely

    Red Hat

  12. bpf: Free reuseport cBPF prog after RCU grace period.CVE-2026-52910Linux · CVSS 7.8 · 0.1% likely

    Linux

  13. zram: fix use-after-free in zram_bvec_write_partial()CVE-2026-53185Linux · CVSS 7.8 · 0.1% likely

    Linux

  14. ALSA: aloop: Fix peer runtime UAF during format-change stopCVE-2026-46090Linux · CVSS 7.8 · 0.1% likely

    Linux

  15. can: isotp: fix tx.buf use-after-free in isotp_sendmsg()CVE-2026-31474Linux · CVSS 7.8 · 0.1% likely

    Linux

  16. multimedia_audio_framework has a Race Condition vulnerabilityCVE-2026-27766OpenHarmony · CVSS 5.5 · 0.1% likely

    OpenHarmony

  17. kernel_linux_common_modules has a Race Condition vulnerabilityCVE-2026-33565OpenHarmony · CVSS 3.3 · 0.1% likely

    OpenHarmony

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in