Skip to content

CWE-413 · weakness in Race Conditions

Improper Resource Locking

21 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

  1. Squid has Denial of Service in ICP Response handlingCVE-2026-32748squid-cache · CVSS 7.5 · 9.3% likely

    Squid-Cache

  2. Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)CVE-2019-17102Bitdefender · CVSS 8.3 · 1.9% likely

    Bitdefender

  3. Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the fir…CVE-2022-24946Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q… · CVSS 7.5 · 1.8% likely
  4. Cisco IOS XE Software AppNav-XE Denial of Service VulnerabilityCVE-2022-20678Cisco · CVSS 8.6 · 1.0% likely

    Cisco

  5. The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an attacker could impersonate…CVE-2023-28649Snap One · CVSS 8.6 · 0.5% likely

    Snap One

  6. Kernel: vmwgfx: race condition leading to information disclosure vulnerabilityCVE-2023-33951Red Hat · CVSS 6.7 · 0.3% likely

    Red Hat

  7. In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread wi…CVE-2022-49737X.org · CVSS 7.7 · 0.3% likely

    X.Org

  8. Kernel: deadlock in ksmbd_find_crypto_ctx()CVE-2023-32253Red Hat · CVSS 5.9 · 0.3% likely

    Red Hat

  9. Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crashCVE-2026-102083Juniper Networks · CVSS 5.9 · 0.3% likely

    Juniper Networks

  10. Automation Runtime SDM requests may impact systemCVE-2025-3450B&R Industrial Automation · CVSS 10 · 0.3% likelycovered by CyberSIXT

    B&R Industrial Automation

  11. Use after free and crash under special conditions in RPZ codeCVE-2026-44608NLnet Labs · CVSS 4.6 · 0.3% likely

    NLnet Labs

  12. A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Map…CVE-2023-2269Kernel · 0.2% likely
  13. An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Pl…CVE-2019-8998BlackBerry · CVSS 7.8 · 0.2% likely

    BlackBerry

  14. Out of bound access in PPC due to race condition in global variable accessCVE-2026-48178Samsung Semiconductor · CVSS 8.8 · 0.2% likely

    Samsung

  15. Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleedCVE-2026-92615Red Hat · CVSS 6.6 · 0.2% likely

    Red Hat

  16. Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availabilityCVE-2025-0003AMD · CVSS 7.3 · 0.2% likely

    AMD

  17. Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchoverCVE-2026-102080Juniper Networks · CVSS 5.3 · 0.2% likely

    Juniper Networks

  18. A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to…CVE-2023-2430kernel · CVSS 5.5 · 0.2% likely
  19. Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted wr…CVE-2026-105390OpenVPN · CVSS 6.9 · 0.1% likely

    OpenVPN

  20. OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vu…CVE-2026-111498Dell · CVSS 4.7 · 0.1% likely

    Dell

  21. Improper resource locking for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary wi…CVE-2026-40705Intel(R) NPU Drivers · CVSS 6.8 · 0.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in