ROS-20260610-73-0036

The vulnerability of the SDL3 RDP client for FreeRDP is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

EUVD-2026-35740

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-35741

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-35739

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-35738

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-42977

CVE-2026-42977 describes a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with Local attack vector, high complexity, and req...

EUVD-2026-35590

Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...

EUVD-2026-35555

Concurrent execution using shared resource with improper synchronization 'race condition' in UI Automation Manager uiamanager.dll allows an authorized attacker to elevate privileges locally...

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-47914

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition occurs in Windows Push Notifications due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

PT-2026-47905

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition occurs in Windows Push Notifications due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

ROS-20260609-73-0005

The vulnerability of the PackageKit package manager is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the system with root privileges...

PT-2026-47986

Name of the Vulnerable Software and Affected Versions UI Automation Manager affected versions not specified Description A race condition occurs in the UI Automation Manager uiamanager.dll due to concurrent execution using a shared resource with improper synchronization. This allows an authorized...

PT-2026-47904

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition occurs in Windows Push Notifications due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

Direct Request ('Forced Browsing')

Overview org.springframework:spring-webmvc is a package that provides Model-View-Controller MVC architecture and ready components that can be used to develop flexible and loosely coupled web applications. Affected versions of this package are vulnerable to Direct Request 'Forced Browsing' via...

Direct Request ('Forced Browsing')

Overview org.springframework:spring-webflux is a Spring Framework module that contains support for reactive HTTP and WebSocket clients as well as for reactive server web applications including REST, HTML browser, and WebSocket style interactions. Affected versions of this package are vulnerable t...

The vulnerability of the caching mechanism of the anti-virus software Trend Micro Apex One, which allows a hacker to enhance their privileges

The vulnerability of the caching mechanism of the anti-virus software Trend Micro Apex One is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the iCore antivirus software service from Trend Micro Apex One allows a malicious actor to escalate their privileges or execute arbitrary code.

The vulnerability of the iCore antivirus software from Trend Micro’s Apex One lies in synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

The vulnerability of the Grafana monitoring and observation platform, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of the Grafana monitoring and observation platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

The software for deploying and executing AI models, NVIDIA Triton Inference Server (previously TensorRT Inference Server), is vulnerable due to synchronization errors when using a shared resource. This vulnerability allows attackers to cause service failures.

The vulnerability of the software for deploying and executing AI models in NVIDIA Triton Inference Server previously known as TensorRT Inference Server stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to cause service failur...