CVE-2022-24537: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Hyper-V Remote Code Execution Vulnerability...

CVE-2022-26829: Concurrent Execution using Shared Resource with Improper Synchronization

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2022-26822: Concurrent Execution using Shared Resource with Improper Synchronization

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2021-39713: Concurrent Execution using Shared Resource with Improper Synchronization

Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel...

CVE-2022-23283: Concurrent Execution using Shared Resource with Improper Synchronization

Windows ALPC Elevation of Privilege Vulnerability...

CVE-2022-21975: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Hyper-V Denial of Service Vulnerability...

CVE-2022-24525: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Update Stack Elevation of Privilege Vulnerability...

CVE-2022-24505: Concurrent Execution using Shared Resource with Improper Synchronization

Windows ALPC Elevation of Privilege Vulnerability...

CVE-2022-24986: Concurrent Execution using Shared Resource with Improper Synchronization

KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands...

CVE-2022-25210: Improper Synchronization

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured...

CVE-2022-24686: Concurrent Execution using Shared Resource with Improper Synchronization

HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. Fixed in 1.0.18, 1.1.12, and 1.2.6...

Mitsubishi Electric MELSEC-Q QJ71E71 series Improper Synchronization (CVE-2016-8368)

An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to conne...

CVE-2022-21881: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2021-43566: Concurrent Execution using Shared Resource with Improper Synchronization

All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for...

CVE-2022-21896: Concurrent Execution using Shared Resource with Improper Synchronization

Windows DWM Core Library Elevation of Privilege Vulnerability...

CVE-2020-35216: Concurrent Execution using Shared Resource with Improper Synchronization

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

CVE-2021-41025

Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 thorugh 6.0.7, including an instance of concurrent execution using shared resource with improper synchronization and one of...

CVE-2021-44513: Concurrent Execution using Shared Resource with Improper Synchronization

Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling...

Microsoft Azure Sphere Pluton concurrent syscalls denial of service vulnerability

Summary A denial of service vulnerability exists in the Pluton syscalls functionality of Microsoft Azure Sphere 21.01, 21.06 and 21.07. A specially-crafted set of syscalls executed in parallel by an unprivileged process can lead to the crash of Pluton, resulting in a device reboot denial of...

CVE-2021-43411: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already has the new privileges, but still refers to the old task and is accessible through the old process port. This can be exploited to get full root...