CWE-363 · Race Conditions
Race Condition Enabling Link Following
12CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
12 CVEs with CWE-363 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-21658Race condition in std::fs::remove_dir_all in rustlangrust-lang · rust · CVSS 7.3 · 2022-01-20 | 7.3 | 1.5% | 2022-01-20 |
| CVE-2024-45310runc can be confused to create empty files/directories on the hostopencontainers · runc · CVSS 3.6 · 2024-09-03 | 3.6 | 0.3% | 2024-09-03 |
| CVE-2025-62161youki container escape via "masked path" abuse due to mount race conditionsyouki-dev · youki · CVSS 7.3 · 2025-11-05 | 7.3 | 0.3% | 2025-11-05 |
| CVE-2026-27139FileInfo can escape from a Root in osGo standard library · os · CVSS 2.5 · 2026-03-06 | 2.5 | 0.2% | 2026-03-06 |
| CVE-2026-112940filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own filestox-dev · filelock · CVSS 7.1 · 2026-10-20 | 7.1 | 0.2% | 2026-10-20 |
| CVE-2018-6693Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerabilityMcAfee · Endpoint Security for Linux Threat Prevention (ENSLTP) · CVSS 5.6 · 2018-09-18 | 5.6 | 0.2% | 2018-09-18 |
| CVE-2026-112914filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directorytox-dev · filelock · CVSS 5.3 · 2026-10-20 | 5.3 | 0.2% | 2026-10-20 |
| CVE-2026-91203Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race conditionRed Hat · Red Hat Enterprise Linux 10 · CVSS 6 · 2026-09-18 | 6.0 | 0.2% | 2026-09-18 |
| CVE-2026-71125Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability al…Oracle Corporation · Oracle VM VirtualBox · CVSS 6.1 · 2026-08-18 | 6.1 | 0.1% | 2026-08-18 |
| CVE-2026-91205Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink raceRed Hat · Red Hat Enterprise Linux 10 · CVSS 6 · 2026-09-18 | 6.0 | 0.1% | 2026-09-18 |
| CVE-2026-112938filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user choosestox-dev · filelock · CVSS 5.8 · 2026-11-05 | 5.8 | 0.1% | 2026-11-05 |
| CVE-2025-13492HP Image Assistant - Potential Escalation of PrivilegeHP Inc · HP Image Assistant · CVSS 5.4 · 2025-12-03 | 5.4 | 0.1% | 2025-12-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.