CWE-366 · Race Conditions
Race Condition within a Thread
18CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
18 CVEs with CWE-366 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-26569Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary co…Synology · Synology DiskStation Manager (DSM) · CVSS 9.8 · 2021-03-12 | 9.8 | 2.3% | 2021-03-12 |
| CVE-2023-6546Kernel: gsm multiplexing race condition leads to privilege escalationRed Hat · Red Hat Enterprise Linux 8 · CVSS 7 · 2023-12-21 | 7.0 | 0.7% | 2023-12-21 |
| CVE-2020-1629Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.Juniper Networks · Junos OS · CVSS 5.9 · 2020-04-08 | 5.9 | 0.7% | 2020-04-08 |
| CVE-2025-31115XZ has a heap-use-after-free bug in threaded .xz decodertukaani-project · xz · CVSS 8.7 · 2025-04-03 | 8.7 | 0.7% | 2025-04-03 |
| CVE-2015-10067oznetmaster SSharpSmartThreadPool SmartThreadPool.cs race conditionoznetmaster · SSharpSmartThreadPool · CVSS 4.6 · 2023-01-18 | 4.6 | 0.6% | 2023-01-18 |
| CVE-2023-4127Race Condition within a Thread in answerdev/answeranswerdev · answerdev/answer · CVSS 6.5 · 2023-08-03 | 6.5 | 0.5% | 2023-08-03 |
| CVE-2023-3218Race Condition within a Thread in it-novum/openitcockpitit-novum · it-novum/openitcockpit · CVSS 6.5 · 2023-06-13 | 6.5 | 0.5% | 2023-06-13 |
| CVE-2025-58143Mutiple vulnerabilities in the Viridian interfaceXen · Xen · CVSS 9.8 · 2025-09-11 | 9.8 | 0.4% | 2025-09-11 |
| CVE-2026-25687ZCC race condition in ZPA tunnel handlerZscaler · Client Connector · CVSS 8.1 · 2026-09-14 | 8.1 | 0.4% | 2026-09-14 |
| CVE-2022-1729A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit pr…Linux · linux kernel · 2022-09-01 | – | 0.3% | 2022-09-01 |
| CVE-2024-2032Race Condition Vulnerability in zenml-io/zenmlzenml-io · zenml-io/zenml · CVSS 3.1 · 2024-06-06 | 3.1 | 0.3% | 2024-06-06 |
| CVE-2026-22819Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.tsakinloluwami · outray · CVSS 5.9 · 2026-01-14 | 5.9 | 0.2% | 2026-01-14 |
| CVE-2024-10630A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality.Ivanti · Application Control Engine · CVSS 7.8 · 2025-01-14 | 7.8 | 0.2% | 2025-01-14 |
| CVE-2026-86247Apache Tomcat Native: Client certificate requirements can be down-gradedApache Software Foundation · Apache Tomcat Native · CVSS 7.4 · 2026-09-23 | 7.4 | 0.2% | 2026-09-23 |
| CVE-2026-23684Race condition vulnerability in SAP Commerce CloudSAP_SE · SAP Commerce Cloud · CVSS 5.9 · 2026-02-10 | 5.9 | 0.2% | 2026-02-10 |
| CVE-2023-4732Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.hRed Hat · Red Hat Enterprise Linux 8 · CVSS 4.7 · 2023-10-03 | 4.7 | 0.2% | 2023-10-03 |
| CVE-2026-3904Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client m…The GNU C Library · glibc · CVSS 6.2 · 2026-03-11 | 6.2 | 0.2% | 2026-03-11 |
| CVE-2026-46181RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()Linux · Linux · CVSS 7.8 · 2026-05-28 | 7.8 | 0.1% | 2026-05-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.