CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-20908

A flaw was found in the Intel NPU Driver for Windows. This time-of-check time-of-use TOCTOU race condition vulnerability allows an unprivileged, authenticated local attacker to cause a denial of service. The attack has high complexity and requires no user interaction. This could lead to a...

CVE-2026-16927

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16922

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16927 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16927 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...

EUVD-2026-63387

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16927

A TOCTOU race condition in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to escalate to root, yielding full confidentiality, integrity, and availability impact (CVSS 7.3 HIGH). CISA reports no known exploitation. IBM's fix is documented at https://www.ibm.com/su...

CVE-2026-16922

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are affected by a TOCTOU race condition exploitable by a local attacker with low privileges, enabling arbitrary code execution with high confidentiality, integrity, and availability impact (CVSS 7.0). Exploitation details are not provided. IBM reference: htt...

CVE-2026-16922 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

EUVD-2026-63382

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16922 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-53783

A time-of-check to time-of-use TOCTOU race condition flaw in the rrsync restricted shell wrapper allows authenticated remote attackers to escape directory restrictions. By replacing a validated path component with a symbolic link prior to file transfer execution, an attacker can bypass intended...

PT-2026-79025

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A time-of-check to time-of-use TOCTOU race condition exists, which could allow a local attacker to execute arbitrary code. A TOCTOU race condition occurs when a...

CVE-2026-76020: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-16935: Time-of-check Time-of-use (TOCTOU) Race Condition

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-64846: UNIX Symbolic Link (Symlink) Following

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

PT-2026-79154

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A time-of-check to time-of-use TOCTOU race condition exists, which could allow a local attacker to gain elevated privileges. A TOCTOU race condition occurs when a program...

F5 Networks BIG-IP : Intel SMM vulnerability (K000162855)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000162855 advisory. Time-of-check time-of-use race condition in the WheaERST SMM module for some IntelR reference platforms may allow an...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview org.springframework.cloud:spring-cloud-config-server is a library that provides an HTTP resource-based API for external configuration. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through the spring.cloud.config.server.svn.basedir...