50663 matches found
CVE-2026-92369 Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation
TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer,...
CVE-2026-92369 Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation
TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer,...
EUVD-2026-89020
TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer,...
CVE-2026-97608
A flaw was found in the Linux kernel's netfilter subsystem. A race condition occurs when network namespace operations are torn down before global logging backends are unregistered. A local user can exploit this timing window through sysctl or netlink interfaces to rebind a logger while it is bein...
CVE-2026-97604
A flaw was found in the Linux kernel's virtual framebuffer vfb driver. A local user can trigger a race condition by requesting colormap data while simultaneously unbinding the driver, causing memory to be freed while still being copied to user space. This use-after-free flaw can lead to a system...
CVE-2026-97602
A flaw was found in the Linux kernel. During network namespace cleanup, incomplete packet fragmentation queues are flushed without properly updating their completion state. A local attacker with access to unprivileged network namespaces can exploit this race condition during IPv6 packet reassembl...
CVE-2026-97429
A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver subsystem. A race condition occurs during queue destruction when internal locks are released while waiting for a queue to resume, allowing a concurrent destroy operation to prematurely free the queue object. A local user could...
CVE-2026-100805
Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...
UBUNTU-CVE-2026-100805
Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...
CVE-2026-100805
Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...
CVE-2026-100805
The Firefox web browser is affected by a race condition and use-after-free vulnerability within its Audio/Video component . This security flaw was addressed and fixed in Firefox 157 . No specific exploitation details or in-the-wild instances are provided in the documents.
CVE-2026-100805 Race condition, use-after-free in the Audio/Video component
Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...
EUVD-2026-88958
Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 157...
CVE-2026-100805
Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...
CVE-2026-100805 Race condition, use-after-free in the Audio/Video component
Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...
OPENSUSE-SU-2026:21968-1 Security update for glibc
This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723. - CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local...
CVE-2026-97594
A flaw was found in the Linux kernel's Landlock security module. A missing reference lock allows a race condition to occur when validating directory permissions during file linking operations. A local attacker could exploit this by executing concurrent file link and rename requests to trigger a...
CVE-2026-97410
A flaw was found in the Linux kernel. This race condition vulnerability allows a local user to cause a Denial of Service DoS by crashing the system. The issue occurs when removing a netconsole logging target concurrently while an unregistered network interface undergoes cleanup. Because the remov...
CVE-2026-77762
A flaw was found in Apache Tomcat. This vulnerability, caused by a race condition during concurrent execution, allows an attacker to inject unauthorized data, known as trailer fields, into another user's HTTP/2 request. This could lead to the manipulation of web traffic or unintended information...