Skip to content

CWE-821 · weakness in Race Conditions

Incorrect Synchronization

14 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

  1. Incorrect Synchronization in polonel/trudeskCVE-2022-1931polonel · CVSS 9.1 · 1.7% likely

    Polonel

  2. Case Insensitive Email Address Validation Vulnerability in lunary-ai/lunaryCVE-2024-1739lunary-ai · CVSS 7.5 · 0.6% likely

    Lunary-Ai

  3. Session Reuse Vulnerability in lunary-ai/lunaryCVE-2024-1902lunary-ai · CVSS 7.5 · 0.4% likely

    Lunary-Ai

  4. Email Validation Bypass in lunary-ai/lunaryCVE-2024-5755lunary-ai · CVSS 5.3 · 0.3% likely

    Lunary-Ai

  5. tcp: fix potential race in tcp_v6_syn_recv_sock()CVE-2026-43198Linux · CVSS 9.8 · 0.3% likely

    Linux

  6. In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are m…CVE-2024-58133ChainMaker · CVSS 4 · 0.3% likely
  7. In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a…CVE-2024-58132ChainMaker · CVSS 4 · 0.3% likely
  8. FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node (that has modified the codebase to allow a lar…CVE-2024-58131FISCO-BCOS · CVSS 4 · 0.3% likely
  9. Qemu: improper ide controller reset can lead to mbr overwriteCVE-2023-5088Red Hat · CVSS 6.4 · 0.3% likely

    Red Hat

  10. Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the…CVE-2026-77584torproject · CVSS 7 · 0.3% likely

    Torproject

  11. Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailabilityCVE-2026-21919Juniper Networks · CVSS 6.5 · 0.2% likely

    Juniper Networks

  12. Incorrect Synchronization in GitLabCVE-2024-4278GitLab · CVSS 5.5 · 0.2% likely

    GitLab

  13. BLE peripheral DoS after few cycles of connect/disconnectsCVE-2024-6657silabs.com · CVSS 6.5 · 0.2% likely

    Silicon Labs

  14. In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sh…CVE-2026-56132libexpat project · CVSS 6.9 · 0.2% likely

    Libexpat Project

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in