CVE-2025-48001

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-49730

Time-of-check time-of-use toctou race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally...

CVE-2025-49730

Time-of-check time-of-use toctou race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally...

CVE-2025-48818

CVE-2025-48818 is a TOCTOU race condition in Windows BitLocker that enables bypass of a security feature via physical access. The CVE is listed in NCSC/NCSC-2025-0213 with impact described as bypassing security measures under Windows BitLocker and a CVSS v3.1 base score of 6.8 (PHYSICAL vector, L...

SUSE CVE-2025-38217

In the Linux kernel, the following vulnerability has been resolved: hwmon: ftsteutates Fix TOCTOU race in ftsread In the ftsread function, when handling hwmonpwmautochannelstemp, the code accesses the shared variable data-fansourcechannel twice without holding any locks. It is first checked again...

PT-2025-27992

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A Time-of-Check to Time-of-Use TOCTOU race condition exists in the fts read function when handling hwmon pwm auto channels temp. The code accesses the shared variable data-fan...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a TOCTOU competition condition leading to undefined behavior...

DEBIAN-CVE-2025-38112

In the Linux kernel, the following vulnerability has been resolved: net: Fix TOCTOU issue in skisreadable sk-skprot-sockisreadable is a valid function pointer when sk resides in a sockmap. After the last skpsockput which usually happens when socket is removed from sockmap, sk-skprot gets restored...

PT-2025-27698

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A Time-of-Check-to-Time-of-Use TOCTOU issue exists in the sk is readable function. The sk-sk prot-sock is readable function pointer is valid when sk resides in a sockmap. However, afte...

Security Bulletin: Waitress WSGI Server Vulnerability: HTTP Pipelining Request Handling with Disabled Lookahead

Summary Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and...

CVE-2025-6217

PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...

CVE-2025-3464

CVE-2025-3464 is an authorization bypass in Asus Armoury Crate 5.9.13.0 via the AsIO3.sys driver (Asusgio3 device). Talos reports a hard-link based bypass of the driver’s access control, which relies on an image-hash check of AsusCertService.exe and a Win32->NT path translation vulnerability. ...

BIT-GITLAB-2024-9512 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2. It may have been possible for private repository to be cloned in case of race condition when a secondary node is out of sync...

CVE-2025-21485 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...

CVE-2024-53018 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption may occur while processing the OIS packet parser...

CVE-2024-53016 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver

Memory corruption while processing I2C settings in Camera driver...

CVE-2024-53016

CVE-2024-53016 affects Qualcomm platforms with a camera driver; memory corruption occurs while processing I2C camera settings. Several connected sources describe a TOCTOU race condition as the underlying root cause, leading to potential instability or corruption locally (attack surface not detail...

Containerd 2.1.x < 2.1.1 TOCTOU

The version of Containerd on the remote host is 2.1.x prior to 2.1.1. It is, therefore, affected by a vulnerability. A time-of-check to time-of-use TOCTOU vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could...

GNU Screen 安全漏洞

Gnu Screen is a terminal multiplexing tool developed by the GNU project that allows users to create multiple virtual terminal sessions in the same physical terminal and supports session resumption, window switching and multi-user sharing. Gnu Screen suffers from a competitive condition...

CVE-2024-30471

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and...