CVE-2026-44800

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-42900

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Store allows an unauthorized attacker to elevate privileges over a network...

kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF

A flaw was found in the Linux kernel's eventpoll mechanism. A Use-After-Free UAF vulnerability, where the system attempts to access memory after it has been freed, can occur during the removal of a file. A local attacker could exploit this race condition to corrupt memory, potentially leading to...

kernel: nvmet-tcp: fix race between ICReq handling and queue teardown

A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. A race condition exists between the handling of an Initialization Connection Request ICReq and the teardown of a queue. A remote attacker, by sending an ICReq and immediately closing the connection, could trigger a...

CVE-2026-50384

CVE-2026-50384 describes a race condition in the Windows Clip Service caused by concurrent execution over a shared resource with improper synchronization. This vulnerability allows a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is LOCAL, with HIGH impact on confidenti...

CVE-2026-50356

CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...

CVE-2026-49808

The CVE-2026-49808 entry describes a race condition in the Windows kernel caused by concurrent execution on a shared resource with improper synchronization. An authorized local attacker can elevate privileges, as indicated by the description and CVSS vector (Local attack, High impact to confident...

CVE-2026-49803

CVE-2026-49803 describes a race condition in the Windows AppX Deployment Service due to improper synchronization, enabling an authorized attacker to perform local privilege escalation. The NVD entry corroborates the description: concurrent execution on a shared resource leads to elevation of priv...

CVE-2026-49806

The vulnerability CVE-2026-49806 affects the Windows USB Print Driver and is caused by a race condition from concurrent access to a shared resource due to improper synchronization. This leads to local privilege escalation by an authenticated, local attacker. The CVE’s base metrics indicate a LOCA...

CVE-2026-49802

CVE-2026-49802 affects the Windows USB Print Driver. It arises from concurrent execution using a shared resource with improper synchronization (a race condition), enabling a locally privileged attacker to elevate privileges. The CVSS v3.1 base score is 7.0 (High) with local attack vector, high im...

CVE-2026-49183

CVE-2026-49183 describes a race condition in Windows Clipboard Server due to improper synchronization, enabling a local attacker with low privileges to elevate to higher rights. The affected component is the Windows Clipboard Server (shared resource handling) and the root cause is concurrent exec...

CVE-2026-44800

CVE-2026-44800 concerns a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to achieve privilege elevation. Documented impact is Local, with Confidentiality, Integrity, and Availability al...

CVE-2026-58608

CVE-2026-58608 affects Windows Print Spooler components, where a race condition from improper synchronization on a shared resource enables remote code execution over a network. The vulnerability allows an authenticated attacker with low privileges to execute code with high impact (C/H; I/H; A/H) ...

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

CVE-2026-54119

CVE-2026-54119 describes a loop with an unreachable exit condition in Windows Active Directory that can be exploited to cause a network-based denial of service by an unauthorized attacker. The affected component is Windows Active Directory; the vulnerability stems from an infinite loop, leading t...

CVE-2026-54996

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-54996

CVE-2026-54996 describes a race condition in the Windows USB Print Driver caused by concurrent access to a shared resource with improper synchronization. An authorized local attacker could elevate privileges. The entry provides CVSS 3.1 base score 7.0 (High) with local attack vector, high impact ...

CVE-2026-54112

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54112

CVE-2026-54112 affects Windows Win32K. The issue is a race condition caused by concurrent execution on a shared resource due to improper synchronization, enabling a locally authenticated user to elevate privileges. The base score is 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges an...

CVE-2026-54107

The CVE-2026-54107 entry documents a race condition caused by improper synchronization in Windows Win32K, enabling a locally authenticated attacker to achieve privilege escalation. Affected software/component: Windows Win32K. Root cause: concurrent execution with shared resource lacking proper sy...