CWE-821 · weakness in Race Conditions
Incorrect Synchronization
14 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.
- Incorrect Synchronization in polonel/trudesk
- Case Insensitive Email Address Validation Vulnerability in lunary-ai/lunary
- Session Reuse Vulnerability in lunary-ai/lunary
- Email Validation Bypass in lunary-ai/lunary
- tcp: fix potential race in tcp_v6_syn_recv_sock()
- In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are m…
- In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a…
- FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node (that has modified the codebase to allow a lar…
- Qemu: improper ide controller reset can lead to mbr overwrite
- Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the…
- Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability
- Incorrect Synchronization in GitLab
- BLE peripheral DoS after few cycles of connect/disconnects
- In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sh…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.