Skip to content

CWE-421 · weakness in Race Conditions

Race Condition During Access to Alternate Channel

8 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. Kernel: ksmbd race issue from smb2 close and logoff with multichannelCVE-2023-32256Red Hat · CVSS 7.5 · 0.6% likely

    Red Hat

  2. An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later). There is a Race condition that leads to code execution because of…CVE-2023-43687CVSS 6.5 · 0.3% likely
  3. Race condition for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to potentially enable denial of service via…CVE-2023-40536Intel(R) PROSet/Wireless WiFi software for Windows · CVSS 4.3 · 0.2% likely
  4. Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2023-41090Intel · CVSS 1.8 · 0.1% likely

    Intel Corporation

  5. Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access.CVE-2023-22310Intel · CVSS 6.5 · 0.1% likely

    Intel Corporation

  6. Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2023-34349Intel · CVSS 4.6 · 0.1% likely

    Intel Corporation

  7. Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentially enable denial of s…CVE-2023-22276Intel · CVSS 6.5 · 0.1% likely

    Intel Corporation

  8. Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2023-34438Intel · CVSS 7.5 · 0.1% likely

    Intel Corporation

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in