Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2012-05-16 CVE-2011-3090 Race Condition vulnerability in Google Chrome
Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes.
network
high complexity
google CWE-362
7.6
2012-05-11 CVE-2012-0656 Race Condition vulnerability in Apple mac OS X
Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate attackers to login to arbitrary accounts by entering the account name and no password.
local
apple CWE-362
6.9
2012-05-11 CVE-2012-0649 Race Condition vulnerability in Apple mac OS X and mac OS X Server
Race condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7.4 allows local users to gain privileges via vectors involving a temporary file.
local
apple CWE-362
6.9
2012-05-03 CVE-2012-1324 Race Condition vulnerability in Cisco IOS 15.1/15.2
Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service (device crash) by sending IPv6 packets, aka Bug ID CSCtk53534.
network
cisco CWE-362
7.1
2012-05-01 CVE-2011-3080 Race Condition vulnerability in Google Chrome
Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows attackers to bypass intended sandbox restrictions via unspecified vectors.
network
high complexity
google CWE-362
7.6
2012-03-08 CVE-2012-0644 Race Condition vulnerability in Apple Iphone OS
Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture.
local
apple CWE-362
6.9
2011-12-07 CVE-2010-5074 Race Condition vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unvisited links during the processing of Cascading Style Sheets (CSS) token sequences, which makes it easier for remote attackers to obtain sensitive information about visited web pages via a timing attack.
network
mozilla CWE-362
4.3
2011-08-18 CVE-2011-1625 Race Condition vulnerability in Cisco IOS
Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching (DLSw) feature is configured, allows remote attackers to cause a denial of service (device crash) by sending a sequence of malformed packets and leveraging a "narrow timing window," aka Bug ID CSCtf74999, a different vulnerability than CVE-2007-0199, CVE-2008-1152, and CVE-2009-0629.
network
high complexity
cisco CWE-362
5.4
2011-08-10 CVE-2011-1257 Race Condition vulnerability in Microsoft Internet Explorer 6/7/8
Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors involving access to an object, aka "Window Open Race Condition Vulnerability."
network
high complexity
microsoft CWE-362
7.6
2011-06-06 CVE-2011-1787 Race Condition vulnerability in VMWare products
Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the guest OS by mounting a filesystem on top of an arbitrary directory.
local
vmware CWE-362
6.9