Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2019-11-04 CVE-2019-18684 Race Condition vulnerability in Sudo Project Sudo
Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo process.
local
high complexity
sudo-project CWE-362
7.0
2019-11-01 CVE-2005-2352 Race Condition vulnerability in Gs-Gpl Project Gs-Gpl
I race condition in Temp files was found in gs-gpl before 8.56 addons scripts.
network
high complexity
gs-gpl-project CWE-362
8.1
2019-10-31 CVE-2019-18421 Race Condition vulnerability in multiple products
An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations.
network
high complexity
xen debian fedoraproject opensuse CWE-362
7.5
2019-10-17 CVE-2019-8162 Race Condition vulnerability in Adobe Acrobat DC
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a race condition vulnerability.
network
high complexity
adobe CWE-362
8.1
2019-10-10 CVE-2019-14810 Race Condition vulnerability in Arista Extensible Operating System
A vulnerability has been found in the implementation of the Label Distribution Protocol (LDP) protocol in EOS.
network
high complexity
arista CWE-362
5.9
2019-10-08 CVE-2019-17342 Race Condition vulnerability in multiple products
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEM_exchange was introduced.
local
high complexity
xen debian CWE-362
7.0
2019-10-08 CVE-2019-17341 Race Condition vulnerability in multiple products
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passed-through PCI device.
local
high complexity
xen debian CWE-362
7.8
2019-09-27 CVE-2019-11736 Race Condition vulnerability in Mozilla Firefox
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates directory, allowing for the replacement of local files, including the Maintenance Service executable, which is run with privileged access.
local
high complexity
mozilla CWE-362
7.0
2019-09-16 CVE-2019-11184 Race Condition vulnerability in multiple products
A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially enable partial information disclosure via adjacent access.
high complexity
intel netapp CWE-362
4.8
2019-09-09 CVE-2019-11546 Race Condition vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2.
network
high complexity
gitlab CWE-362
5.3