CWE-413 · Race Conditions
Improper Resource Locking
21CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
21 CVEs with CWE-413 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-32748Squid has Denial of Service in ICP Response handlingsquid-cache · squid · CVSS 7.5 · 2026-03-26 | 7.5 | 9.3% | 2026-03-26 |
| CVE-2019-17102Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)Bitdefender · Bitdefender BOX 2 · CVSS 8.3 · 2020-01-27 | 8.3 | 1.9% | 2020-01-27 |
| CVE-2022-24946Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the fir…Mitsubishielectric · Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q… · CVSS 7.5 · 2022-06-15 | 7.5 | 1.8% | 2022-06-15 |
| CVE-2022-20678Cisco IOS XE Software AppNav-XE Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 8.6 · 2022-04-15 | 8.6 | 1.0% | 2022-04-15 |
| CVE-2023-28649The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an attacker could impersonate…Snap One · OvrC Cloud · CVSS 8.6 · 2023-05-22 | 8.6 | 0.5% | 2023-05-22 |
| CVE-2023-33951Kernel: vmwgfx: race condition leading to information disclosure vulnerabilityRed Hat · Red Hat Enterprise Linux 8 · CVSS 6.7 · 2023-07-24 | 6.7 | 0.3% | 2023-07-24 |
| CVE-2022-49737In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread wi…X.org · X server · CVSS 7.7 · 2025-03-16 | 7.7 | 0.3% | 2025-03-16 |
| CVE-2023-32253Kernel: deadlock in ksmbd_find_crypto_ctx()Redhat · linux · CVSS 5.9 · 2025-08-02 | 5.9 | 0.3% | 2025-08-02 |
| CVE-2026-102083Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crashJuniper Networks · Junos OS · CVSS 5.9 · 2026-10-14 | 5.9 | 0.3% | 2026-10-14 |
| CVE-2025-3450Automation Runtime SDM requests may impact systemB&R Industrial Automation · Automation Runtime · CVSS 10 · 2025-10-07 | 10.0 | 0.3% | 2025-10-07 |
| CVE-2026-44608Use after free and crash under special conditions in RPZ codeNLnet Labs · Unbound · CVSS 4.6 · 2026-05-20 | 4.6 | 0.3% | 2026-05-20 |
| CVE-2023-2269A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Map…Linux · Kernel · 2023-04-25 | – | 0.2% | 2023-04-25 |
| CVE-2019-8998An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Pl…BlackBerry · QNX Software Development Platform (QNX SDP) · CVSS 7.8 · 2019-07-12 | 7.8 | 0.2% | 2019-07-12 |
| CVE-2026-48178Out of bound access in PPC due to race condition in global variable accessSamsung Semiconductor · Exynos 2200 · CVSS 8.8 · 2026-11-05 | 8.8 | 0.2% | 2026-11-05 |
| CVE-2026-92615Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleedRed Hat · RHEM 1.2 for RHEL 10 · CVSS 6.6 · 2026-09-16 | 6.6 | 0.2% | 2026-09-16 |
| CVE-2025-0003Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availabilityAMD · Xilinx Run Time (XRT) · CVSS 7.3 · 2025-11-24 | 7.3 | 0.2% | 2025-11-24 |
| CVE-2026-102080Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchoverJuniper Networks · Junos OS · CVSS 5.3 · 2026-10-14 | 5.3 | 0.2% | 2026-10-14 |
| CVE-2023-2430A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to…Linux · kernel · CVSS 5.5 · 2023-07-23 | 5.5 | 0.2% | 2023-07-23 |
| CVE-2026-105390Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted wr…OpenVPN · ovpn-dco-win · CVSS 6.9 · 2026-10-13 | 6.9 | 0.1% | 2026-10-13 |
| CVE-2026-111498OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vu…Dell · OpenManage Enterprise · CVSS 4.7 · 2026-10-30 | 4.7 | 0.1% | 2026-10-30 |
| CVE-2026-40705Improper resource locking for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary wi…Intel(R) NPU Drivers · CVSS 6.8 · 2026-11-10 | 6.8 | 0.1% | 2026-11-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.