PT-2026-92314

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A race condition in the bigo worker thread function within bigo.c allows for a local escalation of privilege. This issue enables an attacker to gain System...

PT-2026-92354

Name of the Vulnerable Software and Affected Versions Trusty affected versions not specified Description A race condition in the trusty dputc function within generic-arm64-smcall.c can lead to an out-of-bounds write. This issue allows for local escalation of privilege, requiring System execution...

PT-2026-92317

In handle unmap req of tipc virtio dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92357

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A race condition exists in multiple locations, leading to a time-of-check to time-of-use TOCTOU issue. This flaw allows for local escalation of privilege,...

PT-2026-92362

In ARM64 TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92066

Name of the Vulnerable Software and Affected Versions FreeRDP server versions prior to 3.31.0 Description A use-after-free issue exists in the DRDYNVC parser. This occurs when a channel pointer is dereferenced after the synchronization lock has been released. Authenticated clients can trigger a...

CVE-2026-56988: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple functions of bluetoothcco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-93162

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition exists in the PlatformIntegration component of Google Chrome on Mac. A remote attacker who has already compromised the renderer process can use social engineering and a...

PT-2026-93161

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition in Core allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. A race...

PT-2026-93126

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition in the Network component allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by using a specially crafted HTML page. A...

PT-2026-93166

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition exists within the Extensions component of Google Chrome on Mac. This flaw allows a remote attacker, who has already compromised the renderer process and utilized social...

CVE-2026-92042: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-91712: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-58716: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-97285

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.25 Apache Tomcat versions 10.1.0-M1 through 10.1.59 Apache Tomcat versions 9.0.39 through 9.0.121 Apache Tomcat versions 8.5.59 through 8.5.100 Description A race condition occurs due to improper...

PT-2026-93130

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition in Extensions on Mac allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox. This is achieved throu...

ROS-20260915-73-0084

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML...

CVE-2026-79994: Time-of-check Time-of-use (TOCTOU) Race Condition

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...

PT-2026-92325

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in multiple locations may lead to a use-after-free scenario, where the system continues to use a pointer after the memory it points to has been...

CVE-2026-92050: Concurrent Execution using Shared Resource with Improper Synchronization

Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...