Vulnerabilities > Time-of-check Time-of-use (TOCTOU) Race Condition

DATE CVE VULNERABILITY TITLE RISK
2024-11-22 CVE-2024-41779 IBM Engineering Systems Design Rhapsody - Model Manager 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition.
network
low complexity
CWE-367
critical
9.8
2024-11-09 CVE-2024-50234 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: Clear stale interrupts before resuming device iwl4965 fails upon resume from hibernation on my laptop.
local
high complexity
linux CWE-367
7.0
2024-11-04 CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Memory corruption while handling IOCTL calls in JPEG Encoder driver.
local
high complexity
qualcomm CWE-367
7.0
2024-11-04 CVE-2024-38407 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.
local
high complexity
qualcomm CWE-367
7.0
2024-10-29 CVE-2024-49768 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Agendaless Waitress
Waitress is a Web Server Gateway Interface server for Python 2 and 3.
network
high complexity
agendaless CWE-367
4.8
2024-10-21 CVE-2024-49998 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Linux Kernel
In the Linux kernel, the following vulnerability has been resolved: net: dsa: improve shutdown sequence Alexander Sverdlin presents 2 problems during shutdown with the lan9303 driver.
local
high complexity
linux CWE-367
4.7
2024-10-11 CVE-2024-47494 A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD process into a state where AgentD attempts to reap an already destroyed sensor.
network
high complexity
CWE-367
5.9
2024-10-10 CVE-2024-45120 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Adobe Commerce and Magento
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to a security feature bypass.
network
high complexity
adobe CWE-367
3.1
2024-09-26 CVE-2024-0132 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Nvidia Container Toolkit and Nvidia GPU Operator
NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system.
network
high complexity
nvidia CWE-367
8.3
2024-09-26 CVE-2024-0133 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Nvidia Container Toolkit and Nvidia GPU Operator
NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system.
network
high complexity
nvidia CWE-367
3.4