CWE-366 · weakness in Race Conditions
Race Condition within a Thread
18 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.
- Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary co…
- Kernel: gsm multiplexing race condition leads to privilege escalation
- Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.
- XZ has a heap-use-after-free bug in threaded .xz decoder
- oznetmaster SSharpSmartThreadPool SmartThreadPool.cs race condition
- Race Condition within a Thread in answerdev/answer
- Race Condition within a Thread in it-novum/openitcockpit
- Mutiple vulnerabilities in the Viridian interface
- ZCC race condition in ZPA tunnel handler
- A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit pr…
- Race Condition Vulnerability in zenml-io/zenml
- Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts
- A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality.
- Apache Tomcat Native: Client certificate requirements can be down-graded
- Race condition vulnerability in SAP Commerce Cloud
- Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h
- Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client m…
- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.