Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2018-12-13 CVE-2018-19489 Race Condition vulnerability in multiple products
v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming.
4.7
2018-12-12 CVE-2018-16867 Race Condition vulnerability in multiple products
A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0.
local
high complexity
qemu fedoraproject canonical CWE-362
7.8
2018-12-07 CVE-2018-9519 Race Condition vulnerability in Google Android
In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition.
local
google CWE-362
6.9
2018-12-06 CVE-2018-15332 Race Condition vulnerability in F5 products
The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition.
local
f5 CWE-362
4.4
2018-11-28 CVE-2018-19370 Race Condition vulnerability in Yoast SEO
A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operating System via a ZIP import.
network
yoast CWE-362
6.0
2018-11-14 CVE-2018-9539 Race Condition vulnerability in Google Android 8.0/8.1/9.0
In the ClearKey CAS descrambler, there is a possible use after free due to a race condition.
local
google CWE-362
6.9
2018-11-14 CVE-2018-6061 Race Condition vulnerability in multiple products
A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
high complexity
google redhat debian CWE-362
7.5
2018-10-26 CVE-2018-15687 Race Condition vulnerability in multiple products
A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files.
local
high complexity
canonical systemd-project CWE-362
7.0
2018-10-17 CVE-2018-7110 Race Condition vulnerability in HPE Service Governance Framework 4.2/4.3
A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) version 4.2, 4.3.
network
hpe redhat CWE-362
4.3
2018-10-05 CVE-2018-0480 Race Condition vulnerability in Cisco IOS XE 3.6(5)
A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) condition.
5.7