52650 matches found
SUSE CVE-2026-80775
In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial mm-futex.phash.ref allocation futexhashallocate allocates mm-futex.phash.ref without any locking. Commit d9b05321e21e "futex: Move futexhashfree back to mmput" moved the allocation here and assumed...
CVE-2026-69441
CVE-2026-69441 is a race condition vulnerability in Windows Installer , caused by concurrent execution using a shared resource with improper synchronization . An authorized attacker can exploit this to elevate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vec...
EUVD-2026-73723
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-73635
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69710
Windows Hello is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to elevate privileges locally. The vulnerability requires high privileges and has high attack complexity , but upon exploitation chan...
CVE-2026-69799
CVE-2026-69799 is a race condition vulnerability in Windows Hello , where concurrent execution using a shared resource with improper synchronization allows an authorized local attacker to elevate privileges. The CVSS 3.1 score is 7.8 (HIGH) with a changed scope, indicating the attacker crosses a ...
EUVD-2026-73633
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69792
CVE-2026-69792 is a race condition in Windows Win32K caused by concurrent execution of a shared resource with improper synchronization. An authorized local attacker with low privileges and high attack complexity can bypass a security feature , resulting in a HIGH integrity impact with no confiden...
EUVD-2026-73610
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...
EUVD-2026-73606
Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69779
CVE-2026-69779 is a time-of-check time-of-use (TOCTOU) race condition in the Windows Win32K component that allows an attacker with an existing low-privilege account to escalate privileges locally. The CVSS v3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, no user interaction...
SUSE CVE-2026-80851
In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts can be deleted through GTPCMDDELPDP or while the GTP network device is being unregistered. The latter is serialized by RTNL, but the generic-netlink delete path only holds RCU...
EUVD-2026-73507
Time-of-check time-of-use toctou race condition in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69466
CVE-2026-69466 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows Kernel that allows a low-privileged local attacker to elevate privileges . The vulnerability carries a CVSS 3.1 score of 7.0 (High) , with high impact to confidentiality, integrity, and availability, though explo...
EUVD-2026-73505
Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69440
CVE-2026-69440 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows MIDI Service Module that allows an authorized low-privilege attacker to achieve local privilege escalation . The vulnerability is scored CVSS 3.1: 7.0 (High) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H ,...
CVE-2026-69398
CVE-2026-69398 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized local attacker with low privileges can exploit this to gain high confidentiality, ...
EUVD-2026-73488
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69385
CVE-2026-69385 is a local elevation of privilege vulnerability in Windows TCP/IP caused by a race condition (improper synchronization of a shared resource during concurrent execution). An authorized attacker with low privileges can exploit this to gain higher privileges on the target system. The ...