CWE-662 · Race Conditions
Improper Synchronization
51CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
51 CVEs with CWE-662 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-14059An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Me…Squid-Cache · Squid · 2020-06-30 | – | 4.4% | 2020-06-30 |
| CVE-2018-15555On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.Actiontec · Web6000q Firmware · 2019-06-28 | – | 3.0% | 2019-06-28 |
| CVE-2016-8368An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versi…Mitsubishielectric · Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module · 2017-02-13 | – | 2.6% | 2017-02-13 |
| CVE-2019-17185In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concu…Freeradius · Freeradius · 2020-03-21 | – | 2.2% | 2020-03-21 |
| CVE-2018-4027An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1…Anker-In · Novatek · CVSS 5.3 · 2019-05-13 | 5.3 | 1.7% | 2019-05-13 |
| CVE-2021-20592Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 th…Mitsubishielectric · GOT2000 series GT27 model; GT25 model; GT23 model; GT SoftGOT2000 · 2021-08-05 | – | 1.5% | 2021-08-05 |
| CVE-2019-16137An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, vio…Spin-Rs Project · Spin-Rs · 2019-09-09 | – | 1.4% | 2019-09-09 |
| CVE-2020-36215An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send trait or Sync trait, memory corruption can occur.Hashconsing Project · Hashconsing · 2021-01-22 | – | 1.4% | 2021-01-22 |
| CVE-2020-14098The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and…Mi · Xiaomi router AX1800 · 2021-01-13 | – | 1.2% | 2021-01-13 |
| CVE-2020-36217An issue was discovered in the may_queue crate through 2020-11-10 for Rust. Because Queue does not have bounds on its Send trait or Sync trait, memory corruption can occur.May Queue Project · May Queue · 2021-01-22 | – | 1.1% | 2021-01-22 |
| CVE-2020-36216An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread, a data race and memory corruption can oc…Petabi · Eventio · 2021-01-22 | – | 1.1% | 2021-01-22 |
| CVE-2018-25008In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This synchronization issue can be lead to memory safety issues through rac…Rust-Lang · Rust · 2021-04-14 | – | 1.1% | 2021-04-14 |
| CVE-2024-7409Qemu: denial of service via improper synchronization in qemu nbd server during socket closureRedhat · qemu · CVSS 7.5 · 2024-08-05 | 7.5 | 1.0% | 2024-08-05 |
| CVE-2024-32644Evmos' transaction execution not accounting for all state transition after interaction with precompilesevmos · evmos · CVSS 9.1 · 2024-04-19 | 9.1 | 0.9% | 2024-04-19 |
| CVE-2021-36305Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could poten…Dell · PowerScale OneFS · CVSS 6.5 · 2021-11-12 | 6.5 | 0.8% | 2021-11-12 |
| CVE-2022-25210Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture p…Jenkins project · Jenkins Convertigo Mobile Platform Plugin · 2022-02-15 | – | 0.8% | 2022-02-15 |
| CVE-2021-30904A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iM…Apple · macOS · 2021-08-24 | – | 0.8% | 2021-08-24 |
| CVE-2020-12769An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka C…Linux · Linux Kernel · 2020-05-09 | – | 0.7% | 2020-05-09 |
| CVE-2026-72057net/sched: act_ct: preserve tc_skb_cb across defragmentationLinux · Linux · CVSS 8.2 · 2026-08-15 | 8.2 | 0.6% | 2026-08-15 |
| CVE-2019-15031In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local…Linux · Linux Kernel · 2019-09-13 | – | 0.6% | 2019-09-13 |
| CVE-2025-68775net/handshake: duplicate handshake cancellations leak socketLinux · Linux · CVSS 9.8 · 2026-01-13 | 9.8 | 0.5% | 2026-01-13 |
| CVE-2026-64312crypto: pcrypt - restore callback for non-parallel fallbackLinux · Linux · CVSS 7.5 · 2026-07-25 | 7.5 | 0.5% | 2026-07-25 |
| CVE-2025-27104double eval in For List Iter in Vypervyperlang · vyper · CVSS 7.5 · 2025-02-21 | 7.5 | 0.4% | 2025-02-21 |
| CVE-2020-36208An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sync type, leading to memory corruption.Conquer-Once Project · Conquer-Once · 2021-01-22 | – | 0.4% | 2021-01-22 |
| CVE-2026-43466net/mlx5e: Fix DMA FIFO desync on error CQE SQ recoveryLinux · Linux · CVSS 8.2 · 2026-05-08 | 8.2 | 0.4% | 2026-05-08 |
| CVE-2019-5675NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the product…NVIDIA · NVIDIA GPU Display Driver · 2019-05-10 | – | 0.4% | 2019-05-10 |
| CVE-2019-17344An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartabil…Xen · Xen · 2019-10-08 | – | 0.4% | 2019-10-08 |
| CVE-2020-36211An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can…Devolutions · Gfwx · 2021-01-22 | – | 0.3% | 2021-01-22 |
| CVE-2026-1348978 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization78 · xiaozhi-esp32 · CVSS 3.1 · 2026-06-28 | 3.1 | 0.3% | 2026-06-28 |
| CVE-2020-36207An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync trait, a data race and memory corruption ca…Aovec Project · Aovec · 2021-01-22 | – | 0.3% | 2021-01-22 |
| CVE-2020-36206An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur.Rusb Project · Rusb · 2021-01-22 | – | 0.3% | 2021-01-22 |
| CVE-2026-43362smb: client: fix in-place encryption corruption in SMB2_write()Linux · Linux · CVSS 8.1 · 2026-05-08 | 8.1 | 0.3% | 2026-05-08 |
| CVE-2026-63832wifi: mt76: add wcid publish check in mt76_sta_addLinux · Linux · CVSS 8.8 · 2026-07-19 | 8.8 | 0.2% | 2026-07-19 |
| CVE-2026-68404wifi: cfg80211: use wiphy work for socket owner autodisconnectLinux · Linux · CVSS 7.8 · 2026-08-10 | 7.8 | 0.2% | 2026-08-10 |
| CVE-2025-22853Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.Intel(R) TDX · CVSS 2.3 · 2025-08-12 | 2.3 | 0.2% | 2025-08-12 |
| CVE-2026-64556perf/core: Detach event groups during remove_on_execLinux · Linux · CVSS 7.8 · 2026-07-29 | 7.8 | 0.2% | 2026-07-29 |
| CVE-2022-32643In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is n…MediaTek, Inc. · MT6879, MT6895, MT6983 · CVSS 6.4 · 2023-02-06 | 6.4 | 0.2% | 2023-02-06 |
| CVE-2022-32610In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is n…MediaTek, Inc. · MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T… · CVSS 6.4 · 2022-11-08 | 6.4 | 0.1% | 2022-11-08 |
| CVE-2022-32609In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is n…MediaTek, Inc. · MT6762, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855… · CVSS 6.4 · 2022-11-08 | 6.4 | 0.1% | 2022-11-08 |
| CVE-2026-68149fs: preserve ACL_DONT_CACHE state in forget_cached_acl()Linux · Linux · CVSS 8.4 · 2026-08-10 | 8.4 | 0.1% | 2026-08-10 |
| CVE-2026-23437net: shaper: protect late read accesses to the hierarchyLinux · Linux · CVSS 7.8 · 2026-04-03 | 7.8 | 0.1% | 2026-04-03 |
| CVE-2022-32642In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction i…MediaTek, Inc. · MT6879, MT6895, MT6983 · CVSS 6.4 · 2023-02-06 | 6.4 | 0.1% | 2023-02-06 |
| CVE-2026-31479drm/xe: always keep track of remap prev/nextLinux · Linux · CVSS 7.8 · 2026-04-22 | 7.8 | 0.1% | 2026-04-22 |
| CVE-2022-32648In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…MediaTek, Inc. · MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771,… · CVSS 6.4 · 2023-01-03 | 6.4 | 0.1% | 2023-01-03 |
| CVE-2022-32644In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is n…MediaTek, Inc. · MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885,… · CVSS 6.4 · 2023-01-03 | 6.4 | 0.1% | 2023-01-03 |
| CVE-2026-68103drm/amdgpu: reject mapping a reserved doorbell to a new queueLinux · Linux · CVSS 7.1 · 2026-08-10 | 7.1 | 0.1% | 2026-08-10 |
| CVE-2026-64005net/smc: Do not re-initialize smc hashtablesLinux · Linux · CVSS 7.8 · 2026-07-19 | 7.8 | 0.1% | 2026-07-19 |
| CVE-2023-20611In gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is n…MediaTek, Inc. · MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT67… · CVSS 6.4 · 2023-02-06 | 6.4 | 0.1% | 2023-02-06 |
| CVE-2023-20610In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User inter…MediaTek, Inc. · MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855,… · CVSS 6.4 · 2023-02-06 | 6.4 | 0.1% | 2023-02-06 |
| CVE-2023-20607In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction i…MediaTek, Inc. · MT6765, MT6768, MT8786 · CVSS 6.4 · 2023-02-06 | 6.4 | 0.1% | 2023-02-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.