Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2019-09-09 CVE-2019-11546 Race Condition vulnerability in Gitlab
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2.
network
gitlab CWE-362
3.5
2019-09-06 CVE-2019-9450 Race Condition vulnerability in Google Android
In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition.
local
google CWE-362
4.4
2019-08-30 CVE-2019-5612 Race Condition vulnerability in multiple products
In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe.
network
low complexity
freebsd netapp CWE-362
7.5
2019-08-20 CVE-2019-2121 Race Condition vulnerability in Google Android 9.0
In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition.
local
google CWE-362
6.9
2019-08-07 CVE-2016-10798 Race Condition vulnerability in Cpanel
cPanel before 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134).
network
cpanel CWE-362
4.9
2019-08-01 CVE-2018-20940 Race Condition vulnerability in Cpanel
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of backups (SEC-342).
local
low complexity
cpanel CWE-362
2.1
2019-07-30 CVE-2019-7614 Race Condition vulnerability in Elastic Elasticsearch
A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request.
network
high complexity
elastic CWE-362
5.9
2019-07-30 CVE-2019-11775 Race Condition vulnerability in Eclipse Openj9
All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the modified copy of the loop allowing the test to see one value of the field and subsequently the loop to see a modified field value without retesting the condition moved out of the loop.
network
eclipse CWE-362
5.8
2019-07-25 CVE-2019-11922 Race Condition vulnerability in Facebook Zstandard
A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.
network
facebook CWE-362
6.8
2019-07-25 CVE-2019-2345 Race Condition vulnerability in Qualcomm products
Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM660, SDX20, SDX24
4.4