135 matches found
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in IBM WebSphere Application Server Liberty
Summary IBM WebSphere Application Server Liberty for IBM i is vulnerable to denial-of-service DoS when processing a JSON document CVE-2026-9563, improper synchronization using a shared resource CVE-2026-5516, providing weaker than expected security CVE-2025-14917, identity spoofing CVE-2026-3621,...
Concurrent Execution Using Shared Resource
github.com/spectolabs/hoverfly is vulnerable to Concurrent Execution using Shared Resource. The vulnerability is due to the AddDiff function writing to the shared responsesDiff map without proper synchronization when running in Diff mode, which allows an attacker to send multiple simultaneous...
CVE-2026-50676
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Media allows an authorized attacker to elevate privileges locally...
Windows App Package Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
Microsoft Windows App Store Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
PT-2026-58174
Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A race condition exists in the Windows USB Print Driver. This occurs when concurrent execution using a shared resource happens with...
PT-2026-58202
Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...
PT-2026-58178
Name of the Vulnerable Software and Affected Versions Windows USB Print Driver affected versions not specified Description A race condition occurs in the Windows USB Print Driver due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...
PT-2026-58205
Name of the Vulnerable Software and Affected Versions Windows Clip Service affected versions not specified Description A race condition occurs in the Windows Clip Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally...
CVE-2026-46732
Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3, contain a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...
EUVD-2026-36906
OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination...
GHSA-7FQ5-7WR8-RJWJ OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination
Summary OliveTin's template engine uses a single shared text/template.Template instance tpl package-level variable in service/internal/tpl/templates.go across all goroutines. Every action execution calls tpl.Parsesource followed by t.Execute on this shared instance with no synchronization. When t...
CVE-2026-48708
OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template engine uses a single shared text/template.Template instance tpl package-level variable in service/internal/tpl/templates.go across all goroutines. Every action execution calls...
CVE-2026-48708 OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination
OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, the template engine uses a single shared text/template.Template instance tpl package-level variable in service/internal/tpl/templates.go across all goroutines. Every action execution calls...
PT-2026-49471
Name of the Vulnerable Software and Affected Versions OliveTin versions prior to 3000.13.0 Description The template engine utilizes a single shared text/template.Template instance, specifically the tpl package-level variable in service/internal/tpl/templates.go, across all goroutines. Each action...
PT-2026-47914
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition occurs in Windows Push Notifications due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...
PT-2026-47986
Name of the Vulnerable Software and Affected Versions UI Automation Manager affected versions not specified Description A race condition occurs in the UI Automation Manager uiamanager.dll due to concurrent execution using a shared resource with improper synchronization. This allows an authorized...
PT-2026-47891
Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition exists in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...
Improperly Implemented Security Check for Standard
Overview Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard due to improper enforcement of security rules during concurrent execution of Security Mode Command and N2 handover procedures. An attacker can cause handover failures and disrupt networ...