CWE-364 · Race Conditions
Signal Handler Race Condition
17CVEs
0exploited
0with a public check
2likely (EPSS 10%+)
SortMost likely exploited
17 CVEs with CWE-364 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dosSiemens · OpenSSH · CVSS 8.1 · 2024-07-01 | 8.1 | 100% | 2024-07-01 |
| CVE-2024-6409Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9Siemens · OpenSSH · CVSS 7 · 2024-07-08 | 7.0 | 28% | 2024-07-08 |
| CVE-2024-7589OpenSSH pre-authentication async signal safety issueFreeBSD · FreeBSD · CVSS 8.1 · 2024-08-11 | 8.1 | 2.0% | 2024-08-11 |
| CVE-2025-4598Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpSiemens · systemd-coredump · CVSS 4.7 · 2025-05-30 | 4.7 | 1.3% | 2025-05-30 |
| CVE-1999-0035Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.Gnu · Inet · CVSS 5.4 · 1999-09-29 | 5.4 | 0.8% | 1999-09-29 |
| CVE-2023-1285Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticate…Mitsubishi Electric India · GC-ENET-COM · CVSS 7.5 · 2023-04-14 | 7.5 | 0.7% | 2023-04-14 |
| CVE-2026-24792web_webview has a Race Condition vulnerabilityOpenHarmony · OpenHarmony · CVSS 8.1 · 2026-05-19 | 8.1 | 0.4% | 2026-05-19 |
| CVE-2023-5676Eclipse OpenJ9 possible infinite busy hangEclipse Foundation · OpenJ9 · CVSS 4.1 · 2023-11-15 | 4.1 | 0.4% | 2023-11-15 |
| CVE-2026-42002Concurrency and locking defects in GSS-TSIGPowerDNS · Authoritative · CVSS 5.9 · 2026-05-21 | 5.9 | 0.3% | 2026-05-21 |
| CVE-2020-14317It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing…Redhat · Wildfly · 2021-06-02 | – | 0.2% | 2021-06-02 |
| CVE-2019-3805A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An…Red Hat · wildfly · CVSS 5.5 · 2019-05-03 | 5.5 | 0.2% | 2019-05-03 |
| CVE-2026-52910bpf: Free reuseport cBPF prog after RCU grace period.Linux · Linux · CVSS 7.8 · 2026-06-19 | 7.8 | 0.1% | 2026-06-19 |
| CVE-2026-53185zram: fix use-after-free in zram_bvec_write_partial()Linux · Linux · CVSS 7.8 · 2026-06-25 | 7.8 | 0.1% | 2026-06-25 |
| CVE-2026-46090ALSA: aloop: Fix peer runtime UAF during format-change stopLinux · Linux · CVSS 7.8 · 2026-05-27 | 7.8 | 0.1% | 2026-05-27 |
| CVE-2026-31474can: isotp: fix tx.buf use-after-free in isotp_sendmsg()Linux · Linux · CVSS 7.8 · 2026-04-22 | 7.8 | 0.1% | 2026-04-22 |
| CVE-2026-27766multimedia_audio_framework has a Race Condition vulnerabilityOpenHarmony · OpenHarmony · CVSS 5.5 · 2026-05-19 | 5.5 | 0.1% | 2026-05-19 |
| CVE-2026-33565kernel_linux_common_modules has a Race Condition vulnerabilityOpenHarmony · OpenHarmony · CVSS 3.3 · 2026-05-19 | 3.3 | 0.1% | 2026-05-19 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.