Skip to content

CWE-833 · weakness in Race Conditions

Deadlock

34 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 34 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Windows Security Account Manager (SAM) Denial of Service VulnerabilityCVE-2025-21313Microsoft · CVSS 6.5 · 1.7% likely

    Microsoft

  2. Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers Common Open Policy Service Denial of Service VulnerabilityCVE-2021-1622Cisco · CVSS 8.6 · 1.0% likely

    Cisco

  3. Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityCVE-2026-103558Microsoft · CVSS 7.5 · 1.0% likely

    Microsoft

  4. ASP.NET Core Denial of Service VulnerabilityCVE-2026-70186Microsoft · CVSS 7.5 · 1.0% likely

    Microsoft

  5. deadlock potential with VT-d and legacy PCI device pass-throughCVE-2025-1713Xen · CVSS 7.5 · 0.9% likely

    Xen

  6. A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC…CVE-2022-43767Siemens · CVSS 7.5 · 0.7% likely

    Siemens

  7. Microsoft UFO: Authenticated task-result request can deadlock UFO server session managerCVE-2026-105792microsoft · CVSS 6.5 · 0.7% likely

    Microsoft

  8. Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/sshCVE-2026-39830golang.org/x/crypto · CVSS 9.1 · 0.7% likely

    Golang.org/x/crypto

  9. Narayana: deadlock via multiple join requests sent to lra coordinatorCVE-2024-8447Red Hat · CVSS 5.9 · 0.7% likely

    Red Hat

  10. Vyper has incorrect re-entrancy lock when key is empty stringCVE-2023-42441vyperlang · CVSS 5.3 · 0.5% likely

    Vyperlang

  11. Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlockCVE-2026-46352OISF · CVSS 7.5 · 0.5% likely

    OISF

  12. Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit this vulnerability, leading to…CVE-2024-29172Dell · CVSS 5.9 · 0.5% likely

    Dell

  13. Action Pack: Possible DoS vulnerability in Action Controller Live streamingCVE-2026-126072rails · CVSS 5.9 · 0.4% likely

    Rails

  14. An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event,…CVE-2023-31084Linux · CVSS 5.5 · 0.4% likely

    Linux

  15. Denial-of-service (DoS) via chunk size mismatchCVE-2025-59463SICK AG · CVSS 4.3 · 0.4% likely

    SICK AG

  16. Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its intended check-out period due to a deadlock occurring in t…CVE-2025-8312Devolutions · CVSS 7.1 · 0.4% likely

    Devolutions

  17. iommu/amd: move wait_on_sem() out of spinlockCVE-2026-43253Linux · CVSS 7.5 · 0.4% likely

    Linux

  18. boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpointCVE-2026-70616boringproxy · CVSS 6.5 · 0.3% likely
  19. Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crashCVE-2024-47506Juniper Networks · CVSS 5.9 · 0.3% likely

    Juniper Networks

  20. Possibility of deadlock in libbpf function sock_hash_delete_elemCVE-2023-0160Linux · CVSS 4.7 · 0.3% likely

    Linux

  21. IBM Db2 for Linux denial of serviceCVE-2025-36010IBM · CVSS 6.5 · 0.3% likely

    IBM

  22. Webserver crash caused by scanning on TCP port 80CVE-2025-10150Softing Industrial Automation GmbH · CVSS 8.7 · 0.3% likely
  23. A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a l…CVE-2022-4269Linux · CVSS 5.5 · 0.2% likely

    Linux

  24. Deadlock denial of service in USB CDC-NCM device class on TX enqueue failureCVE-2026-10647zephyrproject · CVSS 5.3 · 0.2% likely

    Zephyrproject

  25. Velociraptor Authenticated Denial of ServiceCVE-2026-77798Rapid7 · CVSS 6.5 · 0.2% likely

    Rapid7

  26. Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dosCVE-2024-0639Redhat · CVSS 5.5 · 0.2% likely

    Red Hat

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.