Vulnerabilities (CVE)

Filtered by CWE-362
Total 2515 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-26307 1 Apache 1 Doris 2026-06-17 N/A 5.3 MEDIUM
Possible race condition vulnerability in Apache Doris. Some of code using `chmod()` method. This method run the risk of someone renaming the file out from under user and chmodding the wrong file. This could theoretically happen, but the impact would be minimal. This issue affects Apache Doris: before 1.2.8, before 2.0.4. Users are recommended to upgrade to version 2.0.4, which fixes the issue.
CVE-2024-26243 1 Microsoft 7 Windows 10 21h2, Windows 10 22h2, Windows 11 21h2 and 4 more 2026-06-17 N/A 7.0 HIGH
Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2024-26242 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-06-17 N/A 7.0 HIGH
Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2024-26236 1 Microsoft 1 Windows Server 2022 23h2 2026-06-17 N/A 7.0 HIGH
Windows Update Stack Elevation of Privilege Vulnerability
CVE-2024-24864 1 Linux 1 Linux Kernel 2026-06-17 N/A 5.3 MEDIUM
A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.
CVE-2024-24861 1 Linux 1 Linux Kernel 2026-06-17 N/A 3.3 LOW
A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow issue, possibly leading to malfunction or denial of service issue.
CVE-2024-24860 1 Linux 1 Linux Kernel 2026-06-17 N/A 4.6 MEDIUM
A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.
CVE-2024-24859 1 Linux 1 Linux Kernel 2026-06-17 N/A 4.6 MEDIUM
A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service.
CVE-2024-24858 2 Debian, Linux 2 Debian Linux, Linux Kernel 2026-06-17 N/A 4.6 MEDIUM
A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service.
CVE-2024-24857 2 Debian, Linux 2 Debian Linux, Linux Kernel 2026-06-17 N/A 4.6 MEDIUM
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service.
CVE-2024-24855 1 Linux 1 Linux Kernel 2026-06-17 N/A 5.0 MEDIUM
A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.
CVE-2024-24255 1 Dronecode 1 Px4 Drone Autopilot 2026-06-17 N/A 4.2 MEDIUM
A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions.
CVE-2024-24254 1 Dronecode 1 Px4 Drone Autopilot 2026-06-17 N/A 4.2 MEDIUM
PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and mission_feasibility_checker.cpp. This will result in the drone uploading overlapping geofences and mission routes.
CVE-2024-23651 1 Mobyproject 1 Buildkit 2026-06-17 N/A 8.7 HIGH
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.
CVE-2024-23599 2026-06-17 N/A 7.9 HIGH
Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potentially enable denial of service via local access.
CVE-2024-23275 1 Apple 1 Macos 2026-06-17 N/A 4.7 MEDIUM
A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access protected user data.
CVE-2024-23239 1 Apple 5 Ipad Os, Iphone Os, Macos and 2 more 2026-06-17 N/A 4.7 MEDIUM
A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to leak sensitive user information.
CVE-2024-23235 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-06-17 N/A 4.7 MEDIUM
A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to access user-sensitive data.
CVE-2024-23196 1 Linux 1 Linux Kernel 2026-06-17 N/A 5.3 MEDIUM
A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.
CVE-2024-22386 1 Linux 1 Linux Kernel 2026-06-17 N/A 5.3 MEDIUM
A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.