Skip to content

CWE-820 · weakness in Race Conditions

Missing Synchronization

15 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

  1. Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2024-49114Microsoft · CVSS 7.8 · 0.8% likely

    Microsoft

  2. Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sources using mixed queries. However such query…CVE-2023-2801Grafana · CVSS 7.5 · 0.7% likely

    Grafana

  3. LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attackers to execute arbitra…CVE-2025-47154Ladybird · CVSS 9 · 0.7% likely
  4. Windows Hyper-V Denial of Service VulnerabilityCVE-2025-49751Microsoft · CVSS 6.8 · 0.6% likely

    Microsoft

  5. Windows Hyper-V Denial of Service VulnerabilityCVE-2025-47999Microsoft · CVSS 6.8 · 0.4% likely

    Microsoft

  6. LightFTP 2.4 Data Race Condition via ABOR Command in ftpserv.cCVE-2026-70637hfiref0x · CVSS 5.9 · 0.4% likely
  7. A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in speci…CVE-2025-1445Hitachi Energy · CVSS 7.5 · 0.3% likely

    Hitachi Energy

  8. The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list h…CVE-2022-50238Microsoft · CVSS 7.4 · 0.2% likely

    Microsoft

  9. Media caddy removal and reinsertion without reboot may cause data lossCVE-2023-45084SoftIron · CVSS 7 · 0.2% likely

    SoftIron

  10. Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crashCVE-2024-30387Juniper Networks · CVSS 6.5 · 0.2% likely

    Juniper Networks

  11. Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crashCVE-2026-57029Juniper Networks · CVSS 5.3 · 0.2% likely

    Juniper Networks

  12. HTTP/1 server crash due to MaxBytesReader header race in net/httpCVE-2026-97054Go standard library · 0.2% likelycovered by CyberSIXT

    Go standard library1 article1 article this week: Go releases fix build time code execution and HTTP flaws

  13. KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulationCVE-2026-53277Linux · CVSS 8.8 · 0.1% likely

    Linux

  14. mm/list_lru: drain before clearing xarray entry on reparentCVE-2026-53153Linux · CVSS 7.8 · 0.1% likely

    Linux

  15. GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPUCVE-2026-22163Imagination Technologies · CVSS 7.8 · 0.1% likely

    Imagination Technologies

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in