Certain HP LaserJet Enterprise and HP LaserJet Managed Printers – Potential Denial of Service

Certain HP LaserJet Enterprise and HP LaserJet Managed Printers may be potentially vulnerable to a Denial of Service due to race conditions when the Android kernel used by HP Workpath Applications is exploited. Disable Workpath Platform via the EWS or Fleet Management Tool...

ROS-20260929-73-0015

The vulnerability of the fnheremoveoldest function in the net/ipv4/route.c module of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...

Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2026-3131)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3131 advisory. Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by...

Amazon Linux 2023 : flatpak, flatpak-devel, flatpak-libs (ALAS2023-2026-3143)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3143 advisory. A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95384): chromium -- security fixes

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95360): chromium -- security fixes

Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95384: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

PT-2026-102738

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context...

CVE-2026-95344: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-12345: Improper Link Resolution Before File Access

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

PT-2026-102664

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host for Linux versions prior to 15.82 Description An improper path validation issue exists in the Cloud Session Recording CSR functionality. A local authenticated attacker can exploit a race condition during path...

CVE-2026-92371: Improper Link Resolution Before File Access

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording CSR functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged...

Important: flatpak

Issue Overview: A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy functio...

PT-2026-102977

Name of the Vulnerable Software and Affected Versions Electron versions prior to 42.0.0-beta.2 Electron versions prior to 41.10.5 Electron versions prior to 39.8.10 Description On macOS, the Squirrel.Mac auto-update framework bundled with Electron includes a privileged ShipIt helper that executes...

CVE-2026-95360: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95280: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-102579

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157 Description A race condition leads to a use-after-free issue within the Audio/Video component. A race condition occurs when the timing or order of events affects the correctness o...

PT-2026-102893

Name of the Vulnerable Software and Affected Versions Fider versions prior to 0.38.0 Description A server-side request forgery issue exists due to a time-of-check time-of-use TOCTOU gap—a race condition where a system checks a condition and then uses the result, but the condition changes between...

CVE-2026-100805: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

ROS-20260929-73-0031

The vulnerability of the usbgadgetstatework function in the /drivers/usb/gadget/udc/core.c file of the Linux kernel is related to situations where the signal processing routine is involved in a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...