CVE-2026-77762

A flaw was found in Apache Tomcat. This vulnerability, caused by a race condition during concurrent execution, allows an attacker to inject unauthorized data, known as trailer fields, into another user's HTTP/2 request. This could lead to the manipulation of web traffic or unintended information...

CVE-2026-95394 Unchecked Input for Loop Condition in Wireshark

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95394 Unchecked Input for Loop Condition in Wireshark

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95394 Unchecked Input for Loop Condition in Wireshark

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95394

A large loop vulnerability exists in the Microsoft Network Monitor file parser within Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 . This issue is caused by unchecked input for loop conditions , which can be exploited to cause a denial of service (DoS) . To remediate this, users should u...

BIT-GITLAB-2026-92628 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context...

CVE-2026-97582

A flaw was found in the Linux kernel's GPIO fan driver. When a device is unbound, pending alarm work is not properly canceled before associated memory resources are freed, resulting in a use-after-free condition. A local attacker could exploit this race condition to cause a Denial of Service DoS...

CVE-2026-86247

A flaw was found in Apache Tomcat Native. A race condition within a thread allows client certificate verification requirements to be down-graded for certain configurations. This could enable an attacker to bypass stricter authentication requirements, potentially leading to unauthorized access or...

CVE-2026-97567

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. A race condition can occur between socket disconnection and packet retransmission timer handling, resulting in an inconsistent socket state. A local user can exploit this timing flaw during active connection teardown to cause a...

CVE-2026-97562

A flaw was found in the Linux kernel's SMB Server Message Block client. A race condition occurs when a Distributed File System DFS automount expires while the client processes active filesystem references, resulting in a use-after-free memory flaw. A local user could exploit this timing issue...

CVE-2026-97558

A flaw was found in the Linux kernel's SMB Server Message Block client subsystem, which can lead to a Denial of Service DoS. Due to a timing issue during deferred file close operations, the kernel fails to properly release an internal file reference count when background cleanup work is already...

CVE-2026-98072

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. This vulnerability allows an attacker to cause a Denial of Service DoS by triggering connection resets or teardowns. Due to a missing memory barrier during transmission release, a race condition can cause the system t...

CVE-2026-98071

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition occurs in the connection path reset logic when connection state flags are completely cleared while concurrent transmission or completion tasks attempt to update them. A local user could exploit this...

CVE-2026-98069

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition between active data transmission and connection teardown can lead to a Denial of Service DoS via a kernel crash. A local user could exploit this flaw by generating network traffic while terminating a...

CVE-2026-98068

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition during connection shutdown can lead to a Denial of Service DoS. When connection teardown coincides with a concurrent connection drop or incoming connection, the kernel may fail to complete socket...

ROS-20260929-73-0065

The vulnerabilities of the functions kvaserusbleafwaitcmd and kvaserusbleafreadbulkcallback in the kernel module drivers/net/can/usb/kvaserusb/kvaserusbleaf.c of the Linux operating system are related to the execution of a loop with an unreachable exit condition. Exploiting these vulnerabilities...

ROS-20260929-73-0031

The vulnerability of the usbgadgetstatework function in the /drivers/usb/gadget/udc/core.c file of the Linux kernel is related to situations where the signal processing routine is involved in a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95344): chromium -- security fixes

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-12345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a...

Amazon Linux 2023 : flatpak, flatpak-devel, flatpak-libs (ALAS2023-2026-3143)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3143 advisory. A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged...