Skip to content

CWE-662 · weakness in Race Conditions

Improper Synchronization

51 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 51 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Me…CVE-2020-140594.4% likely
  2. On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.CVE-2018-155553.0% likely
  3. An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versi…CVE-2016-8368Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module · 2.6% likely
  4. In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concu…CVE-2019-171852.2% likely
  5. An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1…CVE-2018-4027Novatek · CVSS 5.3 · 1.7% likely
  6. Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 th…CVE-2021-20592GOT2000 series GT27 model; GT25 model; GT23 model; GT SoftGOT2000 · 1.5% likely
  7. An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, vio…CVE-2019-161371.4% likely
  8. An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send trait or Sync trait, memory corruption can occur.CVE-2020-362151.4% likely
  9. The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and…CVE-2020-14098Xiaomi router AX1800 · 1.2% likely
  10. An issue was discovered in the may_queue crate through 2020-11-10 for Rust. Because Queue does not have bounds on its Send trait or Sync trait, memory corruption can occur.CVE-2020-362171.1% likely
  11. An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread, a data race and memory corruption can oc…CVE-2020-362161.1% likely
  12. In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This synchronization issue can be lead to memory safety issues through rac…CVE-2018-250081.1% likely
  13. Qemu: denial of service via improper synchronization in qemu nbd server during socket closureCVE-2024-7409Red Hat · CVSS 7.5 · 1.0% likely
  14. Evmos' transaction execution not accounting for all state transition after interaction with precompilesCVE-2024-32644evmos · CVSS 9.1 · 0.9% likely
  15. Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could poten…CVE-2021-36305Dell · CVSS 6.5 · 0.8% likely
  16. Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture p…CVE-2022-25210Jenkins project · 0.8% likely
  17. A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iM…CVE-2021-30904Apple · 0.8% likely
  18. An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka C…CVE-2020-127690.7% likely
  19. net/sched: act_ct: preserve tc_skb_cb across defragmentationCVE-2026-72057Linux · CVSS 8.2 · 0.6% likely
  20. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local…CVE-2019-150310.6% likely
  21. net/handshake: duplicate handshake cancellations leak socketCVE-2025-68775Linux · CVSS 9.8 · 0.5% likely
  22. crypto: pcrypt - restore callback for non-parallel fallbackCVE-2026-64312Linux · CVSS 7.5 · 0.5% likely
  23. double eval in For List Iter in VyperCVE-2025-27104vyperlang · CVSS 7.5 · 0.4% likely
  24. An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sync type, leading to memory corruption.CVE-2020-362080.4% likely
  25. net/mlx5e: Fix DMA FIFO desync on error CQE SQ recoveryCVE-2026-43466Linux · CVSS 8.2 · 0.4% likely
  26. NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the product…CVE-2019-5675NVIDIA · 0.4% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in