988 matches found
CVE-2026-79625 Improper Synchronization in Monitoring in CODESYS Control Runtime
Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...
CVE-2026-79625
The CODESYS Control Runtime is vulnerable to an improper synchronization flaw within its monitoring functionality. When multiple clients submit concurrent requests, the system fails to properly synchronize access, potentially resulting in incorrect reads or writes or the corruption of internal me...
ROS-20260930-73-0050
The vulnerability of the btrfs/transaction.c component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260928-73-0128
The vulnerability of the bpf component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-96456: Concurrent Execution using Shared Resource with Improper Synchronization
The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects the session but not the caller, so an attacker in Bluetooth range can ride along on someone else's successful authentication. The authenticated state is kept in a single shared...
Concurrent Execution Using Shared Resource With Improper Synchronization
Paymenter is vulnerable to Concurrent Execution using Shared Resource with Improper Synchronization. The vulnerability is due to missing transactional locking when processing concurrent service downgrade requests, which allows an authenticated attacker to submit multiple simultaneous requests and...
ROS-20260918-73-0106
The vulnerability of the fs/smb/client/cacheddir.h component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...
CVE-2026-71537: Concurrent Execution using Shared Resource with Improper Synchronization
Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/Livewire/Services/Upgrade.php::doUpgrade relies on Service::upgradable to check for a pending service upgrade and later executes $credit-increment'amount', abs$price without DB::transactio...
ROS-20260916-73-0064
The vulnerability of the hnsroceHWv2.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260916-73-0076
The vulnerability of the drivers/iommu/intel/pasid.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-92042: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-85892
CVE-2026-85892 is a race condition vulnerability in Microsoft Edge (Chromium-based) , caused by concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally , with the scope changed to allow full compromise of co...
CVE-2026-84562: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data...
CVE-2026-84522: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data...
CVE-2026-79969
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a race condition (concurrent execution using shared resource with improper synchronization). An unauthenticated attacker with remote network access could exploit this ...
PT-2026-88974
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...
CVE-2026-77894
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-70091
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to deny service over a network...