PT-2026-2718

CVE-2026-20873 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/VZ7C3660ds...

PT-2026-2711

CVE-2026-20866 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/URu04Bnwnl...

PT-2026-2724

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A flaw in Windows SMB Server related to concurrent execution using a shared resource with improper synchronization, specifically a race condition, could allow an authorized attacke...

PT-2026-2726

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A flaw in Windows SMB Server related to concurrent execution using a shared resource with improper synchronization, specifically a race condition, could allow an authorized attacke...

PT-2026-2719

CVE-2026-20874 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/KTYAuV7eee...

PT-2026-2666

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A time-of-check time-of-use TOCTOU race condition exists in Windows Installer. This condition can be exploited by an authorized attacker to gain elevated privileges locally. The iss...

MiracleLinux 9 : thunderbird-140.3.0-1.el9_6.ML.1 (AXSA:2025-10909:23)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10909:23 advisory. firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition between wbtenabledefault and an IO commit, which could lead to counter inconsistencies and...

MiracleLinux 7 : sssd-1.16.5-10.16.0.1.el7.AXS7 (AXSA:2025-10037:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10037:03 advisory. CVE-2023-3758: fix race condition in adgpo CVEs: CVE-2023-3758 A race condition flaw was found in sssd where the GPO policy is not consistently applied for...

MiracleLinux 8 : kernel-4.18.0-553.34.1.el8_10 (AXSA:2025-9558:05)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9558:05 advisory. kernel: i40e: fix race condition by adding filter's intermediate sync state CVE-2024-53088 kernel: mptcp: cope racing subflow creation in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition between etsqdiscchange and etsqdiscdequeue in net/sched: ets that could lead to reuse after...

CVE-2025-68657

Espressif ESP-IDF USB Host HID Human Interface Device Driver allows access to HID devices. Prior to 1.1.0, calls to hidhostdeviceclose can free the same usbtransfert twice. The USB event callback and user code share the hidifacet state without locking, so both can tear down a READY interface...

AZL-74288 CVE-2025-68468 affecting package avahi for versions less than 0.8-6

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they...

CVE-2025-68657 espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

Espressif ESP-IDF USB Host HID Human Interface Device Driver allows access to HID devices. Prior to 1.1.0, calls to hidhostdeviceclose can free the same usbtransfert twice. The USB event callback and user code share the hidifacet state without locking, so both can tear down a READY interface...

CVE-2025-68657 espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path

Espressif ESP-IDF USB Host HID Human Interface Device Driver allows access to HID devices. Prior to 1.1.0, calls to hidhostdeviceclose can free the same usbtransfert twice. The USB event callback and user code share the hidifacet state without locking, so both can tear down a READY interface...

kernel: Bluetooth: MGMT: Fix possible UAFs

A flaw was found in the Linux kernel’s Bluetooth management subsystem net/bluetooth/mgmt.c. The mgmtpending structure may be freed while still being processed, or remain on the pending command list, which allows a use-after-free or double-free scenario. An attacker with local access to the system...

kernel: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths

A use-after-free vulnerability was found in the DWC3 USB controller driver in the Linux kernel. Multiple unsynchronized execution paths can invoke dwc3removerequests concurrently, leading to premature freeing of USB requests. When one path frees requests while another is still processing them, a...

ROS-20260112-7325

A vulnerability in the btrfssetitemkeysafe function of the Linux operating system kernel is related to synchronization errors when using a shared resource "Race Situation". Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

ROS-20260112-7326

A vulnerability in the btrfsloadzoneinfo function in the fs/btrfs/zoned.c module of the Linux kernel btrfs file system is related to the reuse of previously freed memory due to competitive access to a resource race condition. Exploitation of the vulnerability may allow an intruder to affect...

ROS-20260112-7302

A vulnerability in the gsmcleanupmux function of the Linux kernel NGSM driver is related to the reuse of previously freed memory due to competitive access to a resource "Race Situation". Exploitation of the vulnerability may allow an attacker to escalate his privileges...