1002 matches found
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...
PT-2026-83259
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A race condition exists in Copilot Chat, where concurrent execution using a shared resource with improper synchronization allows an authorized attacker to disclose information over a...
CVE-2026-55784: Concurrent Execution using Shared Resource with Improper Synchronization
free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...
Linux Component DoS
The vulnerability of the drivers/net/ethernet/cadence/macbmain.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-59321: Concurrent Execution using Shared Resource with Improper Synchronization
A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null not thread-safe, e.g. the Kotlin kts engine, concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers...
CVE-2026-59324: Concurrent Execution using Shared Resource with Improper Synchronization
When an IntegrationFlow uses .fluxTransform with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers replyChannel, errorChannel, correlationId, any propagated security/tenant headers copied from...
CVE-2026-74666
A flaw was found in the Linux kernel's packet subsystem. This vulnerability occurs due to improper synchronization during ring reconfiguration, where the system can attempt to access memory that has already been freed or is invalid. This can lead to a system crash, resulting in a Denial of Servic...
CVE-2025-62300: Concurrent Execution using Shared Resource with Improper Synchronization
HCL IntelliOps Event Management IEM is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior...
Linux kernel drivers/md DoS
The vulnerability of the drivers/md components of the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-62727
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-63093
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-1199: Concurrent Execution using Shared Resource with Improper Synchronization
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended...
CVE-2026-50139: Concurrent Execution using Shared Resource with Improper Synchronization
goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, ShareHandler reads the share token's DownloadLimit under RLock, releases the lock, serves the file, then re-acquires the lock to increment the counter. Concurrent requests all read the same Downloaded/DownloadLimit snapshot, all...
CVE-2026-74984: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
Linux driver clocksource sh_tmu Heap Buffer Overflow DoS
The vulnerability of the drivers/clocksource/shtmu.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Component DoS
The vulnerability of the fs/smb/client/cacheddir.h component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Linux hns_roceHW_v2.c DoS
The vulnerability of the hnsroceHWv2.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-73557: Concurrent Execution using Shared Resource with Improper Synchronization
vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safeloadpromptembeds in vllm/renderers/embedutils.py uses torch.sparse.checksparsetensorinvariants, whose process-global save, enable, and restore state can be raced by concurrent promptembeds parts...
Linux kernel btrfs transaction buffer overflow DoS
The vulnerability of the btrfs/transaction.c component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...