PT-2026-87470

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A race condition occurs in Windows Installer due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race...

PT-2026-87439

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A race condition occurs in Windows TCP/IP due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race conditi...

PT-2026-87435

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

PT-2026-87191

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A race condition occurs due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate...

PT-2026-87264

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

PT-2026-87277

Name of the Vulnerable Software and Affected Versions Windows USB Driver versions prior to September 2026 Patch Tuesday Description A race condition exists in the Windows USB Driver due to improper synchronization when using a shared resource. This allows an authorized local attacker to elevate...

CVE-2026-68840: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69782: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-62437: Concurrent Execution using Shared Resource with Improper Synchronization

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

PT-2026-87789

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to deny service over a network...

UBUNTU-CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

ROS-20260907-73-0043

The vulnerability in Erlang is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the software for providing secure remote access to data in Palo Alto Networks’ GlobalProtect App is related to synchronization errors when using a common resource. This allows attackers to elevate their privileges to the root level.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

serial: amba-pl011: synchronize DMA teardown

...

ROS-20260904-73-0008

The vulnerability in Kubernetes is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerabilities of the functions __kvm_at_s12() and __kvm_find_s1_desc_level() in the module arch/arm64/kvm/at.c of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions kvmats12 and kvmfinds1desclevel in the arch/arm64/kvm/at.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, an...

Vulnerability of the functions dvcman_call_on_receive() and dvcman_channel_close() in the channels/drdynvc/client/drdynvc_main.c file of the RDP client FreeRDP, which allows a intruder to gain unauthorized access to protected information

The vulnerabilities of the functions dvcmancallonreceive and dvcmanchannelclose in the file channels/drdynvc/client/drdynvcmain.c of the RDP client FreeRDP are related to synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow an attacker operating remotely...

The vulnerability of the xe_gem_prime_import() function in the drivers/gpu/drm/xe/xe_dma_buf.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xegemprimeimport function in the drivers/gpu/drm/xe/xedmabuf.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the pex_ep_event_pex_rst_deassert() function in the drivers/pci/controller/dwc/pcie-tegra194.c driver for Linux operating system’s PCI core devices allows a hacker to cause a service failure.

The vulnerability of the pexepeventpexrstdeassert function in the drivers/pci/controller/dwc/pcie-tegra194.c driver for Linux operating system’s PCI device kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacke...