Siemens SIMATIC S7-1500 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2025-39697)

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfslockandjoinrequests tests for whether the request is still attached to the mapping, nothing prevents a call to nfsinoderemoverequest from succeeding until we actually lock...

Siemens SIMATIC S7-1500 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2025-39724)

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...

CVE-2026-21231

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-21237

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

ROS-20260211-73-0005

A vulnerability in the net/sched/schprio.c component of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability may allow an attacker to gain unauthorized access to protected information, violate its integrity, and cau...

The vulnerability of the API-endpoint /api/domains/<domainid>/users/<userid>/aliases in VK WorkMail’s corporate email service allows a hacker to circumvent the limit on the number of aliases assigned to a user.

The vulnerability of the API-endpoint /api/domains//users//aliases for VK WorkMail corporate email involves synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to circumvent the limit on the number of aliases assigned to a user...

CVE-2025-54514

Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity...

CVE-2026-21231

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-21231

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

PT-2026-7336

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A flaw exists in the Windows Kernel related to concurrent execution using a shared resource with improper synchronization, creating a race condition. This can allow an authorized...

PT-2026-7341

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

The vulnerability of the WMI_TXSTATUS_EVENTID command in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the WMITXSTATUSEVENTID command in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sc16is7xx_probe() function in the drivers/tty/serial/sc16is7xx.c file of the console TTY driver in the Linux kernel’s parallel port allows a attacker to cause a service failure.

The vulnerability of the sc16is7xxprobe function in the drivers/tty/serial/sc16is7xx.c file of the console TTY driver in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260203-73-0012

A vulnerability in the net/sched/schqfq.c component of the Linux operating system kernel is related to insufficient state checking of a shared resource. Exploitation of the vulnerability could allow an attacker to affect data integrity...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

ROS-20260128-73-0059

Vulnerability in kernel-lt related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260126-73-0021

A vulnerability in the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the software for managing and monitoring NDD Print Agent, related to synchronization errors when using a shared resource (“Race Situation”), allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the software for managing and monitoring NDD Print Agent is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260121-73-0029

A vulnerability in the streamzap.c component of the Linux operating system kernel is related to simultaneous execution using a shared resource with improper synchronization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...