1043 matches found
GHSA-2724-6CPJ-GF3V Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
Summary External knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for othe...
CVE-2026-79962
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...
CVE-2026-79969
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...
PT-2026-88970
Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description An unauthenticated attacker with remote access can exploit a race condition, which occurs when a system's behavior depends on...
CVE-2026-69827
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-69319
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-68840
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73482
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-69385
CVE-2026-69385 is a local elevation of privilege vulnerability in Windows TCP/IP caused by a race condition (improper synchronization of a shared resource during concurrent execution). An authorized attacker with low privileges can exploit this to gain higher privileges on the target system. The ...
CVE-2026-69364
CVE-2026-69364 is an elevation of privilege vulnerability in Windows Print Spooler Components caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized attacker (low privileges) can exploit it over a network to gain higher privileges, t...
EUVD-2026-73453
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-72974
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73179
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
EUVD-2026-73172
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
Windows USB Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...
valkey: Valkey: Remote code execution via use-after-free in stream deserialization
A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...
PT-2026-87264
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
PT-2026-87971
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...
