Vulnerabilities > Time-of-check Time-of-use (TOCTOU) Race Condition

DATE CVE VULNERABILITY TITLE RISK
2023-01-11 CVE-2023-20523 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in AMD products
TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service.
high complexity
amd CWE-367
5.7
2023-01-09 CVE-2022-25716 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Memory corruption in Multimedia Framework due to unsafe access to the data members
local
high complexity
qualcomm CWE-367
7.0
2023-01-03 CVE-2022-32638 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Google Android 11.0/12.0/13.0
In isp, there is a possible out of bounds write due to a race condition.
local
high complexity
google CWE-367
6.4
2022-12-22 CVE-2022-22753 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Mozilla Firefox
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory.
network
high complexity
mozilla CWE-367
7.1
2022-12-22 CVE-2022-26387 When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox would not have noticed.
network
high complexity
CWE-367
7.5
2022-12-14 CVE-2022-3590 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Wordpress
WordPress is affected by an unauthenticated blind SSRF in the pingback feature.
network
high complexity
wordpress CWE-367
5.9
2022-12-13 CVE-2022-44670 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Microsoft products
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
network
high complexity
microsoft CWE-367
8.1
2022-12-12 CVE-2022-44651 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Trendmicro Apex ONE 14.0.10349/2019
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
local
high complexity
trendmicro CWE-367
7.0
2022-12-08 CVE-2022-39908 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Google Android
TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write.
local
high complexity
google CWE-367
7.4
2022-11-30 CVE-2022-45842 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Wpulike WP Ulike
Unauth.
network
high complexity
wpulike CWE-367
3.7