CVE-2023-1586

Avast Antivirus and AVG Antivirus for Windows contain a TOCTOU vulnerability in the restore process that can lead to arbitrary file creation. The root cause is a synchronization/TOCTOU issue during restoration, enabling an attacker with local access to affect file creation within the affected pro...

CVE-2023-1586

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use TOCTOU vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11...

CVE-2023-1585

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use TOCTOU vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later...

CVE-2023-1585

Avast Antivirus for Windows and AVG Antivirus for Windows are affected by a TOCTOU vulnerability in the Quarantine process that can lead to arbitrary file/directory deletion. Root cause: synchronization/TOCTOU in quarantine handling. Impact: local issue enabling deletion of files within the quara...

CVE-2023-1585: Time-of-check Time-of-use (TOCTOU) Race Condition

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use TOCTOU vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later...

CVE-2023-1586: Time-of-check Time-of-use (TOCTOU) Race Condition

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use TOCTOU vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11...

CVE-2023-0006: Time-of-check Time-of-use (TOCTOU) Race Condition

A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to delete system files from the endpoint with elevated privileges through a race condition...

SUSE SLES15 Security Update : podman (SUSE-SU-2023:1812-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1812-1 advisory. Update to version 4.4.4: libpod: always use direct mapping macos pkginstaller: do not fail when podman-mac-helper fails podman-mac-helper:...

Race condition

Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute...

CVE-2022-43946

Fortinet FortiClientWindows prior to version 7.0.7 contains a combination of a critical resource permission assignment error (CWE-732) and a TOCTOU race condition (CWE-367). These flaws can allow an attacker on the same file sharing network to remotely execute commands by writing data into a Wind...

CVE-2022-43946

Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute...

CVE-2022-43946

Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute...

CVE-2022-43946: Incorrect Permission Assignment for Critical Resource

Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute...

Debian dla-3383 : grunt - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3383 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3383-1 [email protected] https://www.debian.org/lts/security/...

CVE-2022-33270: Time-of-check Time-of-use (TOCTOU) Race Condition

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message...

GO-2023-1681 Time-of-check time-of-use race condition in github.com/containers/podman/v4

A Time-of-check Time-of-use TOCTOU flaw appears in this version of podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system...

CVE-2022-36980: Time-of-check Time-of-use (TOCTOU) Race Condition

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-3093: Time-of-check Time-of-use (TOCTOU) Race Condition

This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the iceupdater update mechanism. The issue results from the lack of proper validation of user-supplied...

Podman Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-check Time-of-use TOCTOU flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system...

GHSA-QWQV-RQGF-8QH8 Podman Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-check Time-of-use TOCTOU flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system...