CWE-413 · weakness in Race Conditions
Improper Resource Locking
21 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.
- Squid has Denial of Service in ICP Response handling
- Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)
- Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the fir…
- Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability
- The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an attacker could impersonate…
- Kernel: vmwgfx: race condition leading to information disclosure vulnerability
- In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread wi…
- Kernel: deadlock in ksmbd_find_crypto_ctx()
- Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash
- Automation Runtime SDM requests may impact system
- Use after free and crash under special conditions in RPZ code
- A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Map…
- An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Pl…
- Out of bound access in PPC due to race condition in global variable access
- Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed
- Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability
- Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover
- A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to…
- Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted wr…
- OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vu…
- Improper resource locking for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary wi…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.