5812 matches found
CVE-2026-51673
Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-14367: Concurrent Execution using Shared Resource with Improper Synchronization
The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...
CVE-2026-58616
Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...
EUVD-2026-67847
Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...
CVE-2026-80715
In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...
CVE-2026-80715 igc: remove napi_synchronize() in igc_down()
In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...
The vulnerability of the Windows Common Log File System Driver in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to synchronization errors when using common resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability in the driver/net/ethernet/cadence/macb_main.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/net/ethernet/cadence/macbmain.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Corosync cluster engine, which allows a hacker to trigger a service failure
The vulnerability of the Corosync cluster engine is related to incorrect checking of the return value of a function. Exploiting this vulnerability could allow an attacker to cause service failures...
PT-2026-83259
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A race condition exists in Copilot Chat, where concurrent execution using a shared resource with improper synchronization allows an authorized attacker to disclose information over a...
ROS-20260828-73-0019
The vulnerability in the drivers/regulator/core.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260828-73-0011
The vulnerability of the unregisterfprobe function in the kernel/trace/fprobe.c module, which supports kernel tracing in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-55784: Concurrent Execution using Shared Resource with Improper Synchronization
free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...
CVE-2026-61800: Improper Limitation of a Pathname to a Restricted Directory
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...
CVE-2026-26456
A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...
[SECURITY] Fedora 43 Update: rsync-3.5.0-1.fc43
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...
PT-2026-82513
Name of the Vulnerable Software and Affected Versions ccoap version 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 Description A null pointer dereference occurs in the server-side session management logic. This is caused by a race condition—a situation where the timing or order of events affects the...
CVE-2026-26456
A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...