CWE-367 · Race Conditions
Time-of-check Time-of-use (TOCTOU) Race Condition
911CVEs
7exploited
1with a public check
11likely (EPSS 10%+)
SortMost likely exploited
911 CVEs with CWE-367 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-30088In CISA KEVExploitedWindows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7 · 2024-06-11 | 7.0 | 68% | 2024-06-11 |
| CVE-2023-35311In CISA KEVExploitedMicrosoft Outlook Security Feature Bypass VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 8.8 · 2023-07-11 | 8.8 | 16% | 2023-07-11 |
| CVE-2015-3246In CISA KEVExploitedlibuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a deni…Red Hat · Libuser · CVSS 7.4 · 2015-08-11 | 7.4 | 8.5% | 2015-08-11 |
| CVE-2025-22224In CISA KEVExploitedVMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privilege…VMware · ESXi · CVSS 9.3 · 2025-03-04 | 9.3 | 1.6% | 2025-03-04 |
| CVE-2025-38352In CISA KEVExploitedposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()Linux · Linux · CVSS 7.8 · 2025-07-22 | 7.8 | 1.4% | 2025-07-22 |
| CVE-2026-119977In CISA KEVExploitedWordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code ExecutionWordPress Foundation · WordPress · CVSS 8.1 · 2026-10-31 | 8.1 | 1.2% | 2026-10-31 |
| CVE-2022-48618In CISA KEVExploitedThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and writ…Apple · tvOS · CVSS 7 · 2024-01-09 | 7.0 | 0.5% | 2024-01-09 |
| CVE-2025-34027CheckVersa Concerto API Path Based - Authentication BypassVersa · Concerto · CVSS 10 · 2025-05-21 | 10.0 | 46% | 2025-05-21 |
| CVE-2022-36980This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this v…Ivanti · Avalanche · CVSS 9.4 · 2023-03-29 | 9.4 | 82% | 2023-03-29 |
| CVE-2004-0594The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execut…Php · Php · 2004-07-16 | – | 55% | 2004-07-16 |
| CVE-2024-0132NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container…NVIDIA · Container Toolkit · CVSS 9 · 2024-09-26 | 9.0 | 41% | 2024-09-26 |
| CVE-2023-38146Windows Themes Remote Code Execution VulnerabilityMicrosoft · Windows 11 version 21H2 · CVSS 8.8 · 2023-09-12 | 8.8 | 37% | 2023-09-12 |
| CVE-2024-50379Apache Tomcat: RCE due to TOCTOU issue in JSP compilationApache Software Foundation · Apache Tomcat · CVSS 9.8 · 2024-12-17 | 9.8 | 32% | 2024-12-17 |
| CVE-2024-43452Windows Registry Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2024-11-12 | 7.5 | 30% | 2024-11-12 |
| CVE-2003-0813A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by c…Microsoft · Windows 2000 · 2003-10-15 | – | 17% | 2003-10-15 |
| CVE-2020-1337Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 2004 · CVSS 7.8 · 2020-08-17 | 7.8 | 14% | 2020-08-17 |
| CVE-2015-1743Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a differe…Microsoft · Internet Explorer · 2015-06-10 | – | 14% | 2015-06-10 |
| CVE-2024-26218Windows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2024-04-09 | 7.8 | 13% | 2024-04-09 |
| CVE-2024-21371Windows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7 · 2024-02-13 | 7.0 | 11% | 2024-02-13 |
| CVE-2024-56337Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incompleteApache Software Foundation · Apache Tomcat · CVSS 9.8 · 2024-12-20 | 9.8 | 9.0% | 2024-12-20 |
| CVE-2019-15126An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that…Broadcom · Bcm4389 Firmware · 2020-02-05 | – | 7.3% | 2020-02-05 |
| CVE-2026-44112OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge WritesOpenClaw · OpenClaw · CVSS 9.6 · 2026-05-06 | 9.6 | 7.3% | 2026-05-06 |
| CVE-2022-29800A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being disc…Microsoft · networkd-dispatcher · CVSS 4.7 · 2022-09-21 | 4.7 | 7.2% | 2022-09-21 |
| CVE-2024-30084Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7 · 2024-06-11 | 7.0 | 5.9% | 2024-06-11 |
| CVE-2024-21433Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7 · 2024-03-12 | 7.0 | 5.1% | 2024-03-12 |
| CVE-2019-0836An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE…Microsoft · Windows · 2019-04-09 | – | 4.3% | 2019-04-09 |
| CVE-2018-1121procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() returns PID entries in ascending numeric order, a process occupyi…Procps Project · procps-ng, procps · CVSS 3.9 · 2018-06-13 | 3.9 | 4.1% | 2018-06-13 |
| CVE-2020-27252Medtronic MyCareLink Smart Time-of-check Time-of-use Race ConditionMedtronic · Smart Model 25000 Patient Reader · CVSS 8.8 · 2020-12-14 | 8.8 | 3.8% | 2020-12-14 |
| CVE-2025-23359NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain acc…NVIDIA · Container Toolkit · CVSS 8.3 · 2025-02-12 | 8.3 | 3.7% | 2025-02-12 |
| CVE-2024-39420Acrobat Reader | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)Adobe · Acrobat Reader · CVSS 7 · 2024-08-14 | 7.0 | 3.5% | 2024-08-14 |
| CVE-2021-32708Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystemthephpleague · flysystem · CVSS 9.8 · 2021-06-24 | 9.8 | 3.5% | 2021-06-24 |
| CVE-2018-8449A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2…Microsoft · Windows Server 2016 · 2018-09-13 | – | 3.1% | 2018-09-13 |
| CVE-2017-0411An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This…Google Inc. · Android · 2017-02-08 | – | 2.9% | 2017-02-08 |
| CVE-2018-8584An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerabilit…Microsoft · Windows Server 2016 · 2018-11-14 | – | 2.7% | 2018-11-14 |
| CVE-2020-8867This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not…OPC Foundation · UA .NET Standard · CVSS 5.3 · 2020-04-22 | 5.3 | 2.6% | 2020-04-22 |
| CVE-2017-11830Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed,…Microsoft Corporation · Device Guard · 2017-11-15 | – | 2.6% | 2017-11-15 |
| CVE-2017-0412An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This…Google Inc. · Android · 2017-02-08 | – | 2.5% | 2017-02-08 |
| CVE-2019-7249In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root a…Keybase · Keybase · 2019-01-31 | – | 2.5% | 2019-01-31 |
| CVE-2026-20816Windows Installer Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.8 · 2026-01-13 | 7.8 | 2.4% | 2026-01-13 |
| CVE-2024-24995A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.Ivanti · Avalanche · CVSS 8.8 · 2024-04-19 | 8.8 | 2.4% | 2024-04-19 |
| CVE-2024-24993A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.Ivanti · Avalanche · CVSS 8.8 · 2024-04-19 | 8.8 | 2.4% | 2024-04-19 |
| CVE-2018-0966A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2…Microsoft · Windows Server 2016 · 2018-04-12 | – | 2.3% | 2018-04-12 |
| CVE-2020-24428Acrobat Reader DC for macOS Race Condition Vulnerability Could Lead to Privilege EscalationAdobe · Acrobat Reader · CVSS 7.7 · 2020-11-05 | 7.7 | 2.3% | 2020-11-05 |
| CVE-2019-9486STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes…Strato · Hidrive Desktop Client · 2019-04-30 | – | 2.2% | 2019-04-30 |
| CVE-2021-3969A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could al…Lenovo · IMController · CVSS 7.8 · 2022-05-18 | 7.8 | 1.9% | 2022-05-18 |
| CVE-2021-3922A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacke…Lenovo · IMController · CVSS 7.8 · 2022-05-18 | 7.8 | 1.9% | 2022-05-18 |
| CVE-2024-39894OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Simila…No vendor recorded · CVSS 7.5 · 2024-07-02 | 7.5 | 1.6% | 2024-07-02 |
| CVE-2024-7348PostgreSQL relation replacement during pg_dump executes arbitrary SQLPostgresql · PostgreSQL · CVSS 8.8 · 2024-08-08 | 8.8 | 1.6% | 2024-08-08 |
| CVE-2019-5421Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#incr…Plataformatec · Devise ruby gem · 2019-04-03 | – | 1.6% | 2019-04-03 |
| CVE-2011-4126Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere.Calibre-Ebook · Calibre · 2021-10-27 | – | 1.5% | 2021-10-27 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.