998 matches found
CVE-2026-59324: Concurrent Execution using Shared Resource with Improper Synchronization
When an IntegrationFlow uses .fluxTransform with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription have their reply headers replyChannel, errorChannel, correlationId, any propagated security/tenant headers copied from...
CVE-2026-59321: Concurrent Execution using Shared Resource with Improper Synchronization
A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null not thread-safe, e.g. the Kotlin kts engine, concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers...
CVE-2026-74666
A flaw was found in the Linux kernel's packet subsystem. This vulnerability occurs due to improper synchronization during ring reconfiguration, where the system can attempt to access memory that has already been freed or is invalid. This can lead to a system crash, resulting in a Denial of Servic...
CVE-2025-62300: Concurrent Execution using Shared Resource with Improper Synchronization
HCL IntelliOps Event Management IEM is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior...
The vulnerability of the drivers/md components of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the drivers/md components of the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-62727
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-63093
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-50139: Concurrent Execution using Shared Resource with Improper Synchronization
goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, ShareHandler reads the share token's DownloadLimit under RLock, releases the lock, serves the file, then re-acquires the lock to increment the counter. Concurrent requests all read the same Downloaded/DownloadLimit snapshot, all...
CVE-2026-1199: Concurrent Execution using Shared Resource with Improper Synchronization
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended...
CVE-2026-74984: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
The vulnerability of the hns_roceHW_v2.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the hnsroceHWv2.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability in the fs/smb/client/cached_dir.h component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the fs/smb/client/cacheddir.h component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability in the driver/clocksource/sh_tmu.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drivers/clocksource/shtmu.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-73557: Concurrent Execution using Shared Resource with Improper Synchronization
vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safeloadpromptembeds in vllm/renderers/embedutils.py uses torch.sparse.checksparsetensorinvariants, whose process-global save, enable, and restore state can be raced by concurrent promptembeds parts...
The vulnerability in the btrfs/transaction.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the btrfs/transaction.c component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-66802
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...
CVE-2026-62908
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-62820
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to execute code over a network...