CWE-367: CWE-367
Yearly Trend
Top Affected Vendors
All CWE-367 CVEs (175)
CVE-2026-25641 is a sandbox escape vulnerability in SandboxJS library versions before 0.8.29. Attackers can bypass JavaScript sandbox restrictions by ...
Feb 6, 2026A critical TOCTOU vulnerability in Manager accounting software allows attackers to bypass DNS validation and access internal network resources. Both D...
Nov 7, 2025This vulnerability in n8n workflow automation platform allows authenticated users with workflow creation/modification permissions to read sensitive fi...
Feb 4, 2026A double fetch vulnerability in the sandbox kernel driver of Avast/AVG Antivirus on Windows allows local attackers to escalate privileges via pool ove...
Nov 11, 2025A Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat allows attackers to bypass security checks and write malicious file...
Dec 20, 2024A Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat's JSP compilation allows attackers to achieve Remote Code Execution...
Dec 17, 2024A race condition vulnerability in IBM Engineering Systems Design Rhapsody - Model Manager allows remote attackers to bypass security restrictions and ...
Nov 22, 2024CVE-2024-27114 is an unauthenticated remote code execution vulnerability in SO Planning online planning tool. Attackers can upload PHP files that exec...
Sep 11, 2024This vulnerability in OpenStack Magnum's cert_manager.py component allows remote attackers to execute arbitrary code on affected systems. It affects O...
Apr 12, 2024This CVE describes a TOCTOU vulnerability in VMware ESXi and Workstation that allows local administrative users within a virtual machine to execute ar...
Mar 4, 2025This vulnerability allows a malicious application to potentially corrupt hypervisor memory through a Time-of-Check Time-of-Use (TOCTOU) race condition...
Jun 14, 2022A race condition in Waitress web server allows HTTP pipelining attacks when request lookahead is enabled. Remote attackers can bypass connection closu...
Oct 29, 2024This vulnerability in Qualcomm Snapdragon chipsets allows improper integrity checks leading to race conditions between PDCP and RRC tasks after receiv...
Jun 14, 2022This vulnerability in Qualcomm Snapdragon chipsets allows improper integrity checks leading to race conditions between PDCP and RRC tasks after receiv...
Jun 14, 2022This CVE describes a Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Foscam R2C IP cameras that allows authenticated attackers with...
Apr 21, 2022A TOCTOU vulnerability in NVIDIA Container Toolkit 1.16.1 or earlier allows specially crafted container images to access the host file system when usi...
Sep 26, 2024A time-of-check time-of-use race condition vulnerability in Zoom Workplace Apps allows authenticated local users to escalate privileges. This affects ...
May 14, 2025This vulnerability allows attackers to bypass anti-tampering protection in Zscaler Client Connector when the Repair App functionality is used. It affe...
Apr 30, 2024CVE-2023-38146 is a remote code execution vulnerability in Windows Themes that allows attackers to execute arbitrary code on affected systems. It affe...
Sep 12, 2023This vulnerability allows attackers to bypass security features in Microsoft Outlook, potentially enabling them to execute malicious code or access re...
Jul 11, 2023This vulnerability is a race condition in Qualcomm Snapdragon chipsets that can cause a null pointer dereference when timeline fence operations occur ...
Sep 9, 2021CVE-2025-23359 is a Time-of-Check Time-of-Use (TOCTOU) vulnerability in NVIDIA Container Toolkit for Linux that allows a malicious container image to ...
Feb 12, 2025A time-of-check to time-of-use (TOCTOU) vulnerability in Avast/AVG Antivirus allows local attackers to perform out-of-bounds writes through IOCTL requ...
Nov 8, 2023A race condition vulnerability in the virtualization base module could allow attackers to compromise the confidentiality and integrity of the virtuali...
Aug 6, 2025MSI Center versions before 2.0.52.0 contain a Time-of-Check Time-of-Use (TOCTOU) vulnerability that allows local attackers to escalate privileges. Thi...
Apr 10, 2025CVE-2024-48322 is a race condition vulnerability in the password reset functionality of Run.codes that allows attackers to bypass authentication. By e...
Nov 11, 2024This vulnerability in Firefox Focus for iOS allows attackers to execute unauthorized JavaScript on top origin sites by exploiting a race condition whe...
Feb 22, 2024A Time-of-Check Time-of-Use (TOCTOU) race condition vulnerability in CatoNetworks CatoClient's PrivilegedHelperTool component allows attackers to esca...
Oct 3, 2023This authentication bypass vulnerability in Ivanti Avalanche allows remote attackers to gain unauthorized access to the EnterpriseServer service. Atta...
Mar 29, 2023This vulnerability in JetBrains TeamCity allows attackers to exploit a race condition during agent registration via XML-RPC, potentially enabling unau...
Feb 25, 2022CVE-2011-4126 is a race condition vulnerability in Calibre's Linux mount helper that allows unprivileged local users to mount arbitrary devices to any...
Oct 27, 2021A time-of-check time-of-use race condition vulnerability in GitHub Copilot and Visual Studio allows authenticated attackers to execute arbitrary code ...
Feb 10, 2026A race condition vulnerability in AMD Secure Processor (ASP) allows attackers to corrupt memory by exploiting timing differences between checking and ...
Feb 11, 2026This CVE describes a Time-of-check time-of-use (TOCTOU) race condition vulnerability in AMD Secure Processor (ASP) that could allow attackers to modif...
Feb 11, 2026This vulnerability allows attackers to bypass code signature verification in Native Access's XPC service on macOS through PID reuse attacks. An attack...
Feb 2, 2026A time-of-check time-of-use race condition in Windows Ancillary Function Driver for WinSock allows authenticated attackers to escalate privileges loca...
Jan 13, 2026A Time-of-Check Time-of-Use (TOCTOU) race condition vulnerability in Windows Installer allows authenticated attackers to elevate privileges locally. T...
Jan 13, 2026This CVE describes a Time-of-Check Time-of-Use (TOCTOU) race condition vulnerability in the NtQueryInformationToken function in Windows. It allows aut...
Oct 14, 2025A Time-of-Check Time-of-Use (TOCTOU) race condition vulnerability in the Windows Cloud Files Mini Filter Driver allows authenticated attackers to esca...
Oct 14, 2025A time-of-check time-of-use (TOCTOU) race condition vulnerability in Intel Connectivity Performance Suite installers allows authenticated local users ...
Aug 12, 2025This CVE describes a memory corruption vulnerability in Qualcomm components that occurs when processing simultaneous requests via an escape path. Succ...
Aug 6, 2025This vulnerability allows memory corruption when the Virtual Camera Data Mover writes to hardware registers. It affects systems using Qualcomm chipset...
Aug 6, 2025This vulnerability allows memory corruption through improper handling of INIT and multimode invoke IOCTL calls in FastRPC. Attackers could potentially...
Jun 3, 2025This CVE describes a memory corruption vulnerability in Qualcomm hardware encoders when taking snapshots due to unvalidated userspace buffers. Attacke...
Feb 3, 2025This vulnerability allows memory corruption through improper handling of memory map information in IOCTL calls. Attackers could potentially execute ar...
Feb 3, 2025Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) race condition vulnerability that allows a low-privileged attacker with local a...
Dec 11, 2024This CVE describes a Windows Win32 Kernel Subsystem vulnerability that allows local attackers to escalate privileges from a lower-privileged account t...
Nov 12, 2024This vulnerability allows memory corruption in the Qualcomm JPEG Encoder driver when processing IOCTL input parameters. Attackers could exploit this t...
Nov 4, 2024A Time-of-Check Time-of-Use (TOCTOU) vulnerability in Trend Micro Apex One and Apex One as a Service agents allows local attackers to escalate privile...
Jun 10, 2024CVE-2021-3899 is a race condition vulnerability in Apport's 'replaced executable' detection mechanism that allows local attackers to execute arbitrary...
Jun 3, 2024About CWE-367 (CWE-367)
Our database tracks 175 CVEs classified as CWE-367, with 16 rated critical and 120 rated high severity. The average CVSS score for CWE-367 vulnerabilities is 7.2.
External reference: View CWE-367 on MITRE CWE →
Monitor CWE-367 Vulnerabilities
Get alerted when new CWE-367 CVEs affect your infrastructure.
Start Monitoring Free