CWE-667 · Race Conditions
Improper Locking
682CVEs
2exploited
0with a public check
5likely (EPSS 10%+)
SortMost likely exploited
682 CVEs with CWE-667 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-1782In CISA KEVExploitedA race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, t…Apple · iOS and iPadOS · CVSS 7 · 2021-04-02 | 7.0 | 2.2% | 2021-04-02 |
| CVE-2025-43510In CISA KEVExploitedA memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, mac…Apple · iOS and iPadOS · CVSS 7.8 · 2025-12-12 | 7.8 | 0.4% | 2025-12-12 |
| CVE-2019-10072The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5.0 to 8.5.40 . By not…Apache · Apache Tomcat · 2019-06-21 | – | 73% | 2019-06-21 |
| CVE-2002-1850mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a l…Apache · Http Server · 2005-06-28 | – | 17% | 2005-06-28 |
| CVE-2009-2699The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.1…Apache · Http Server · 2009-10-13 | – | 14% | 2009-10-13 |
| CVE-2004-0174Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new…Apache · Http Server · 2004-03-25 | – | 12% | 2004-03-25 |
| CVE-2009-4272A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via cr…Linux · Linux Kernel · 2010-01-27 | – | 11% | 2010-01-27 |
| CVE-2020-24606Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response…Squid-Cache · Squid · CVSS 8.6 · 2020-08-24 | 8.6 | 4.6% | 2020-08-24 |
| CVE-2006-5158The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS expor…Linux · Linux Kernel · 2006-10-03 | – | 3.7% | 2006-10-03 |
| CVE-2006-2275Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot proces…Lksctp · Stream Control Transmission Protocol · 2006-05-09 | – | 3.6% | 2006-05-09 |
| CVE-2020-13246An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another.Gitea · Gitea · 2020-05-20 | – | 2.0% | 2020-05-20 |
| CVE-2020-12658gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shu…Gssproxy Project · Gssproxy · 2020-12-31 | – | 1.8% | 2020-12-31 |
| CVE-2006-2374The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (…Microsoft · Windows 2000 · 2006-06-13 | – | 1.7% | 2006-06-13 |
| CVE-2019-15513An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp…Openwrt · Libuci · 2019-08-23 | – | 1.7% | 2019-08-23 |
| CVE-2021-26708A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsoc…Linux · Linux Kernel · 2021-02-05 | – | 1.6% | 2021-02-05 |
| CVE-2021-20291A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of…Storage Project · containers/storage · 2021-04-01 | – | 1.6% | 2021-04-01 |
| CVE-2019-6321HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This v…Hp · HP Z4 G4 Workstation (Xeon W) · 2019-05-29 | – | 1.4% | 2019-05-29 |
| CVE-2021-41141Missing release of locks in PJSIPpjsip · pjproject · CVSS 5.9 · 2022-01-04 | 5.9 | 1.4% | 2022-01-04 |
| CVE-2000-0338Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before i…Concurrent Versions Software Project · Concurrent Versions Software · 2000-10-13 | – | 1.4% | 2000-10-13 |
| CVE-2021-3667An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolOb…Redhat · libvirt · 2022-03-02 | – | 1.4% | 2022-03-02 |
| CVE-2022-3996X.509 Policy Constraints Double LockingOpenSSL · OpenSSL · CVSS 7.5 · 2022-12-13 | 7.5 | 1.3% | 2022-12-13 |
| CVE-2019-6322HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This v…Hp · HP Z4 G4 Workstation (Xeon W) · 2019-05-29 | – | 1.2% | 2019-05-29 |
| CVE-2010-4210The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of…Freebsd · Freebsd · 2010-11-20 | – | 1.1% | 2010-11-20 |
| CVE-2022-0897A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj ins…Redhat · libvirt · 2022-03-25 | – | 1.0% | 2022-03-25 |
| CVE-2020-15529An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists…Gog · Galaxy · 2020-07-05 | – | 1.0% | 2020-07-05 |
| CVE-2019-8829A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watch…Apple · iOS and iPadOS · 2020-10-27 | – | 1.0% | 2020-10-27 |
| CVE-2019-11599The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local…Linux · Linux Kernel · 2019-04-29 | – | 1.0% | 2019-04-29 |
| CVE-2019-5886An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file, there is no validation lock file in the Add method, which allows an attacker to rein…Shopxo · Shopxo · 2019-01-10 | – | 1.0% | 2019-01-10 |
| CVE-2023-52699sysv: don't call sb_bread() with pointers_lock heldLinux · Linux · CVSS 5.3 · 2024-05-19 | 5.3 | 1.0% | 2024-05-19 |
| CVE-2020-10573An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private rooms in AudioBridge.Meetecho · Janus · 2020-03-14 | – | 1.0% | 2020-03-14 |
| CVE-2021-43429A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempool_destroy method due to a failture to release locks pool->lock.Seagate · Cortx-S3 Server · 2022-04-07 | – | 0.9% | 2022-04-07 |
| CVE-2024-38582nilfs2: fix potential hang in nilfs_detach_log_writer()Linux · Linux · CVSS 5.3 · 2024-06-19 | 5.3 | 0.9% | 2024-06-19 |
| CVE-2022-48216Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds.Uniswap · Universal Router Firmware · CVSS 7.5 · 2023-01-04 | 7.5 | 0.8% | 2023-01-04 |
| CVE-2020-36220An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer<T> omits a required T: Send bound, a data race and memory corruption can occur.Va-Ts Project · Va-Ts · 2021-01-22 | – | 0.8% | 2021-01-22 |
| CVE-2020-15674Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these…Mozilla · Firefox · 2020-10-01 | – | 0.8% | 2020-10-01 |
| CVE-2002-0051Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.Microsoft · Windows 2000 · CVSS 7.8 · 2002-06-25 | 7.8 | 0.8% | 2002-06-25 |
| CVE-2023-3750Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of serviceRed Hat · Red Hat Enterprise Linux 9 · CVSS 6.5 · 2023-07-24 | 6.5 | 0.8% | 2023-07-24 |
| CVE-2024-40980drop_monitor: replace spin_lock by raw_spin_lockLinux · Linux · CVSS 7.5 · 2024-07-12 | 7.5 | 0.8% | 2024-07-12 |
| CVE-2024-41036net: ks8851: Fix deadlock with the SPI chip variantLinux · Linux · CVSS 7.5 · 2024-07-29 | 7.5 | 0.8% | 2024-07-29 |
| CVE-2022-22175Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processedJuniper Networks · Junos OS · CVSS 7.5 · 2022-01-19 | 7.5 | 0.7% | 2022-01-19 |
| CVE-2024-35971net: ks8851: Handle softirqs at the end of IRQ thread to fix hangLinux · Linux · CVSS 7.5 · 2024-05-20 | 7.5 | 0.7% | 2024-05-20 |
| CVE-2026-32283Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsGo standard library · crypto/tls · CVSS 7.5 · 2026-04-08 | 7.5 | 0.6% | 2026-04-08 |
| CVE-2008-4302fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlo…Linux · Linux Kernel · 2008-09-29 | – | 0.6% | 2008-09-29 |
| CVE-2021-47192scsi: core: sysfs: Fix hang when device state is set via sysfsLinux · Linux · CVSS 5.3 · 2024-04-10 | 5.3 | 0.6% | 2024-04-10 |
| CVE-2009-1961The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to…Linux · Linux Kernel · 2009-06-06 | – | 0.6% | 2009-06-06 |
| CVE-2021-47587net: systemport: Add global locking for descriptor lifecycleLinux · Linux · CVSS 9.8 · 2024-06-19 | 9.8 | 0.5% | 2024-06-19 |
| CVE-2020-15668A lock was missing when accessing a data structure and importing certificate information into the trust database. This vulnerability affects Firefox < 80 and Firefox for Android <…Mozilla · Firefox · 2020-10-01 | – | 0.5% | 2020-10-01 |
| CVE-2020-3704u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This C…Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… · 2020-11-02 | – | 0.5% | 2020-11-02 |
| CVE-2024-39468smb: client: fix deadlock in smb2_find_smb_tcon()Linux · Linux · CVSS 7.5 · 2024-06-25 | 7.5 | 0.5% | 2024-06-25 |
| CVE-2020-12771An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.Linux · Linux Kernel · 2020-05-09 | – | 0.5% | 2020-05-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.