CVE-2026-12345

A race condition exists in the tempfile.TemporaryDirectory cleanup process. An attacker who can modify the tree during cleanup may replace a directory with a symbolic link , causing the process to delete files or reset permissions and flags on files outside the temporary directory. This vulnerabi...

CVE-2026-12345 Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

PSF-2026-42

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

CVE-2026-12345

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

CVE-2026-12345 Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

CVE-2026-12345 Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack due to a race condition in the onexc handler of TemporaryDirectory.rmtree in Lib/tempfile.py, which responds to a PermissionError or IsADirectoryError by calling resetperms and os.unlink on the absolute path, resolving th...

CVE-2026-95344

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-89140

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-95344

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-95344

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-95344

A race condition within the DevTools component of Google Chrome (prior to version 154.0.8037.57 ) allows a remote attacker to bypass site isolation security boundaries. Exploitation requires social engineering to trick a user into installing a crafted Chrome extension , which can then be used to ...

CVE-2026-95384

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95384

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95384

A race condition exists in the Transactions Platform of Google Chrome (prior to version 154.0.8037.57). This vulnerability allows a remote attacker to potentially leak sensitive information through a crafted HTML page. Remediation includes updating to version 154.0.8037.57 or later. Specific pack...

EUVD-2026-89129

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95384

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95360

Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-89120

Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95360

Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...