Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2019-12-18 CVE-2019-11090 Race Condition vulnerability in Intel products
Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; Intel(R) TXE 3.1.70 and 4.0.20; Intel(R) SPS before versions SPS_E5_04.01.04.305.0, SPS_SoC-X_04.00.04.108.0, SPS_SoC-A_04.00.04.191.0, SPS_E3_04.01.04.086.0, SPS_E3_04.08.04.047.0 may allow an unauthenticated user to potentially enable information disclosure via network access.
network
intel CWE-362
4.3
2019-12-18 CVE-2019-8757 Race Condition vulnerability in Apple mac OS X
A race condition existed when reading and writing user preferences.
local
apple CWE-362
1.9
2019-12-18 CVE-2019-8606 Race Condition vulnerability in Apple mac OS X
A validation issue existed in the handling of symlinks.
local
apple CWE-362
6.9
2019-12-18 CVE-2019-8565 Race Condition vulnerability in Apple Iphone OS
A race condition was addressed with additional validation.
network
high complexity
apple CWE-362
7.6
2019-12-18 CVE-2019-6236 Race Condition vulnerability in Apple Icloud
A race condition existed during the installation of iCloud for Windows.
network
high complexity
apple CWE-362
7.6
2019-12-18 CVE-2019-6232 Race Condition vulnerability in Apple Icloud
A race condition existed during the installation of iTunes for Windows.
network
high complexity
apple CWE-362
7.6
2019-12-16 CVE-2019-16779 Race Condition vulnerability in multiple products
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket.
4.3
2019-12-15 CVE-2014-3701 Race Condition vulnerability in Redhat Edeploy and Jboss Enterprise web Server
eDeploy has tmp file race condition flaws
network
redhat CWE-362
critical
9.3
2019-12-11 CVE-2019-19580 Race Condition vulnerability in multiple products
An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations, because of an incomplete fix for CVE-2019-18421.
network
high complexity
xen fedoraproject CWE-362
6.6
2019-12-06 CVE-2019-2219 Race Condition vulnerability in Google Android 10.0/9.0
In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass.
local
google CWE-362
4.7