3622 matches found
PT-2026-90480
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Rust implementation of the device resource management devres system. This occurs when two execution paths attempt to revoke a Devres concurrently: the driv...
PT-2026-90007
Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description A race condition in the document value layer allows concurrent server threads to operate on the same internal memory without synchronization, causing memory corruption. An authenticate...
PT-2026-90216
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ring-buffer component where discarding a cached reader page after a concurrent ring buffer resize uses the new global subbuf order for the free pages call. Because...
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
Executive SummaryThe follow-up protection for CVE-2025-62164 is incomplete at vLLM revision 26587f9519e22a5c4549ead7595ad9ca3229c4fd. It wraps serialized prompt-embedding reconstruction and dense conversion in torch.sparse.checksparsetensorinvariants, but PyTorch 2.11.0 implements that context wi...
EUVD-2026-75088
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in isoconnready isoconnready looks up the BIS listener socket with isogetsock, which takes a reference, and then, without re-checking its state, creates a child socket from it...
CVE-2026-80914
CVE-2026-80914 is a use-after-free vulnerability in the Linux kernel's Bluetooth ISO subsystem , specifically in the iso_conn_ready() function. When a BIS listener socket is closed concurrently between iso_get_sock() and lock_sock(), the socket may be freed while a child socket remains linked to ...
CVE-2026-86766
Snipe-IT versions up to and including 8.6.3 contain a race condition TOCTOU in the consumable checkout API endpoint POST /api/v1/consumables/consumableid/checkout. The requested quantity is validated against the number of remaining units before the database transaction begins, and the transaction...
EUVD-2026-74921
Snipe-IT 8.6.3 and earlier and develop pre-release commits prior to the fix contain a race condition in the asset checkout paths. Api\AssetsController::checkout and Assets\AssetCheckoutController::store call Asset::availableForCheckout outside the mutation path and then invoke Asset::checkOut...
CVE-2026-79962
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...
CVE-2026-87816
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expireafterviews limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
CVE-2026-87816 PasswordPusher before 2.11.1 Race Condition View Limit Bypass
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expireafterviews limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
CVE-2026-87816 PasswordPusher before 2.11.1 Race Condition View Limit Bypass
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expireafterviews limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
EUVD-2026-74842
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expireafterviews limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
CVE-2026-87816 PasswordPusher before 2.11.1 Race Condition View Limit Bypass
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expireafterviews limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
PT-2026-88954
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire after views limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
PT-2026-89035
Snipe-IT versions up to and including 8.6.3 contain a race condition TOCTOU in the consumable checkout API endpoint POST /api/v1/consumables/consumable id/checkout. The requested quantity is validated against the number of remaining units before the database transaction begins, and the transactio...
PT-2026-89013
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description A race condition exists in the asset checkout paths. The functions ApiAssetsController::checkout and AssetsAssetCheckoutController::store call Asset::availableForCheckout outside the mutation path a...
CVE-2026-70582
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...