260 matches found
EUVD-2023-36799
Malicious code in bioql PyPI...
EUVD-2023-24757
Malicious code in bioql PyPI...
EUVD-2023-31800
Malicious code in bioql PyPI...
EUVD-2025-20589
Malicious code in bioql PyPI...
EUVD-2023-36798
Malicious code in bioql PyPI...
RLSA-2025:16373 Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock: Fix transport TOCTOU CVE-2025-38461 For more details about the security issues, including the impact, a CVSS score,...
CVE-2025-54667
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions.This issue affects myCred: from n/a through = 2.9.4.3...
CVE-2025-27076 Time-of-check Time-of-use (TOCTOU) Race Condition in Display
Memory corruption while processing simultaneous requests via escape path...
CVE-2025-21455
CVE-2025-21455 describes memory corruption when submitting blob data to kernel space through IOCTL on Qualcomm chipsets. Affected component: kernel IOCTL handling for blob data. Root cause: memory corruption in blob submission path; exploitation is local (attack vector LOCAL) with low privileges ...
CVE-2025-3464
CVE-2025-3464 is an authorization bypass in Asus Armoury Crate 5.9.13.0 via the AsIO3.sys driver (Asusgio3 device). Talos reports a hard-link based bypass of the driver’s access control, which relies on an image-hash check of AsusCertService.exe and a Win32->NT path translation vulnerability. ...
CVE-2024-30471
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and...
CVE-2023-20135
A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to a time-of-check, time-of-use TOCTOU race condition when an install query regarding an ISO imag...
CVE-2022-43946
Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute...
CVE-2021-34413
All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use TOC/TOU vulnerability during the plugin installation process. This could allow a standard user to write their own malicious application to the plugin directory, allowing the...
CVE-2021-23977
Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox 8...
CVE-2020-0003
In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions...
Alibaba Cloud Linux 3 : 0171: postgresql:13 (ALINUX3-SA-2024:0171)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0171 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-7348: Time-of-check Time-of-use TOCTOU rac...
CVE-2025-29833
Time-of-check time-of-use toctou race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally...
MS-EVEN RPC Remote Code Execution Vulnerability
Time-of-check time-of-use toctou race condition in Windows Fundamentals allows an authorized attacker to execute code over a network...
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Time-of-check time-of-use toctou race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally...