4448 matches found
CVE-2022-33691: Time-of-check Time-of-use (TOCTOU) Race Condition
A possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to interleave malicious operations...
CVE-2022-27904
Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use TOCTOU race-condition attack during the agent install process...
Race condition
Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use TOCTOU race-condition attack during the agent install process...
CVE-2022-27904
Automox Agent for macOS is affected by CVE-2022-27904 due to a time-of-check/time-of-use (TOCTOU) race condition during installation. The issue also involves improper access control on a file used by the PostInstall script, enabling an unprivileged user to obtain root access. Affected versions ar...
CVE-2022-27904
Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use TOCTOU race-condition attack during the agent install process...
CVE-2022-27904: Time-of-check Time-of-use (TOCTOU) Race Condition
Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use TOCTOU race-condition attack during the agent install process...
CVE-2021-35111
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile...
CVE-2021-35111
The CVE-2021-35111 entry describes a TOCTOU race condition caused by improper validation of the tag ID when RRC sends the tag ID to the MAC in Qualcomm Snapdragon Connectivity and Snapdragon Mobile. The root cause is the tag ID validation step during RRC processing, which can be exploited remotel...
CVE-2021-35111
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile...
CVE-2021-30347: Time-of-check Time-of-use (TOCTOU) Race Condition
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-30343: Time-of-check Time-of-use (TOCTOU) Race Condition
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-35082: Time-of-check Time-of-use (TOCTOU) Race Condition
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has been received in Snapdragon Industrial IOT...
CVE-2021-35090: Time-of-check Time-of-use (TOCTOU) Race Condition
Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-35111: Improper Input Validation
Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile...
CVE-2021-30342: Time-of-check Time-of-use (TOCTOU) Race Condition
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...
Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins
Due to a time-of-check to time-of-use TOCTOU race condition, the file browser for workspaces, archived artifacts, and $JENKINSHOME/userContent/ follows symbolic links to locations outside the directory being browsed in Jenkins 2.275 and LTS 2.263.2. This allows attackers with Job/Workspace...
CVE-2022-31466 TOCTOU Vulnerability in Quick Heal Total Security
Time of Check - Time of Use TOCTOU vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when th...
CVE-2022-31466
CVE-2022-31466 is a TOCTOU vulnerability in Quick Heal Total Security, affected versions prior to 12.1.1.27. The issue arises from the window between malware detection and quarantine/cleanup, enabling a local attacker to replace the quarantined file with a symlink and escalate privileges, potenti...
CVE-2022-31466: Improper Link Resolution Before File Access
Time of Check - Time of Use TOCTOU vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when th...
