CWE-662 · 52 records

Improper Synchronization

CVEs in this class

52 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2018-15555No exploit	On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by usactiontec · web6000q firmware · CWE-662 Pre-auth	Critical9.8	—	2.9%	Jun 28, 2019
39Monitor	CVE-2025-68775No exploit	net/handshake: duplicate handshake cancellations leak socketlinux · linux · CWE-662 Pre-auth	Critical9.8	—	0.5%	Jan 13, 2026
36Monitor	CVE-2024-32644No exploit	Evmos' transaction execution not accounting for all state transition after interaction with precompilesevmos · evmos · CWE-662 Pre-auth	Critical9.1	—	0.9%	Apr 19, 2024
35Monitor	CVE-2016-8368No exploit	An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, mitsubishielectric · qj71e71-100 firmware · CWE-662 Pre-auth Denial of service	High8.6	—	2.6%	Feb 13, 2017
35Monitor	CVE-2026-53277No exploit	KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulationlinux · linux kernel · CWE-662	High8.8	—	0.1%	Jun 25, 2026
33Monitor	CVE-2026-68149No exploit	fs: preserve ACL_DONT_CACHE state in forget_cached_acl()linux · linux · CWE-662	High8.4	—	0.1%	Aug 10, 2026
32Monitor	CVE-2026-72057No exploit	net/sched: act_ct: preserve tc_skb_cb across defragmentationlinux · linux · CWE-662 Pre-auth	High8.2	—	0.5%	Aug 15, 2026
32Monitor	CVE-2026-43466No exploit	net/mlx5e: Fix DMA FIFO desync on error CQE SQ recoverylinux · linux kernel · CWE-662 Pre-auth	High8.2	—	0.4%	May 8, 2026
31Monitor	CVE-2019-17185No exploit	In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes.freeradius · freeradius · CWE-662 Pre-auth Denial of service	High7.5	—	2.2%	Mar 20, 2020
31Monitor	CVE-2018-4027No exploit	An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Ananker-in · roav dashcam a1 firmware · CWE-662 Pre-auth Denial of service	High7.5	—	1.6%	May 13, 2019
31Monitor	CVE-2020-36208No exploit	An issue was discovered in the conquer-once crate before 0.3.2 for Rust.conquer-once project · conquer-once · CWE-662	High7.8	—	0.4%	Jan 26, 2021
31Monitor	CVE-2019-5675No exploit	NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlnvidia · gpu driver · CWE-662 Local privilege escalation	High7.8	—	0.3%	May 10, 2019
31Monitor	CVE-2026-68404No exploit	wifi: cfg80211: use wiphy work for socket owner autodisconnectlinux · linux · CWE-662	High7.8	—	0.1%	Aug 10, 2026
31Monitor	CVE-2026-64556No exploit	perf/core: Detach event groups during remove_on_execlinux · linux · CWE-662	High7.8	—	0.1%	Jul 29, 2026
31Monitor	CVE-2026-31479No exploit	drm/xe: always keep track of remap prev/nextlinux · linux kernel · CWE-662	High7.8	—	0.1%	Apr 22, 2026
30Monitor	CVE-2021-20592No exploit	Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model commitsubishielectric · gt softgot2000 · CWE-662 Pre-auth Denial of service	High7.5	—	1.4%	Aug 5, 2021
30Monitor	CVE-2019-16137No exploit	An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used.spin-rs project · spin-rs · CWE-662 Pre-auth Denial of service	High7.5	—	1.4%	Sep 9, 2019
30Monitor	CVE-2020-36215No exploit	An issue was discovered in the hashconsing crate before 1.1.0 for Rust.hashconsing project · hashconsing · CWE-662 Pre-auth Denial of service	High7.5	—	1.3%	Jan 26, 2021
30Monitor	CVE-2020-14098No exploit	The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts.mi · ax1800 firmware · CWE-662 Pre-auth	High7.5	—	1.2%	Jan 13, 2021
30Monitor	CVE-2024-7409No exploit	Qemu: denial of service via improper synchronization in qemu nbd server during socket closurered hat · red hat enterprise linux 8 · CWE-662 Pre-auth Denial of service	High7.5	—	1.0%	Aug 5, 2024
30Monitor	CVE-2026-64312No exploit	crypto: pcrypt - restore callback for non-parallel fallbacklinux · linux kernel · CWE-662 Pre-auth Denial of service	High7.5	—	0.5%	Jul 25, 2026
28Monitor	CVE-2020-36211No exploit	An issue was discovered in the gfwx crate before 0.3.0 for Rust.devolutions · gfwx · CWE-662	High7.0	—	0.3%	Jan 26, 2021
28Monitor	CVE-2020-36207No exploit	An issue was discovered in the aovec crate through 2020-12-10 for Rust.aovec project · aovec · CWE-662	High7.0	—	0.2%	Jan 26, 2021
28Monitor	CVE-2020-36206No exploit	An issue was discovered in the rusb crate before 0.7.0 for Rust.rusb project · rusb · CWE-662	High7.0	—	0.2%	Jan 26, 2021
28Monitor	CVE-2026-68103No exploit	drm/amdgpu: reject mapping a reserved doorbell to a new queuelinux · linux · CWE-662	High7.1	—	0.1%	Aug 10, 2026

CVE-2018-15555
40Plan
On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by us
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
actiontec · web6000q firmwareJun 28, 2019
CVE-2025-68775
39Monitor
net/handshake: duplicate handshake cancellations leak socket
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxJan 13, 2026
CVE-2024-32644
36Monitor
Evmos' transaction execution not accounting for all state transition after interaction with precompiles
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
evmos · evmosApr 19, 2024
CVE-2016-8368
35Monitor
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5,
HighCVSS 8.6No exploitEPSS 2%
- Pre-auth
- Denial of service
mitsubishielectric · qj71e71-100 firmwareFeb 13, 2017
CVE-2026-53277
35Monitor
KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
HighCVSS 8.8No exploitEPSS 0%
linux · linux kernelJun 25, 2026
CVE-2026-68149
33Monitor
fs: preserve ACL_DONT_CACHE state in forget_cached_acl()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 10, 2026
CVE-2026-72057
32Monitor
net/sched: act_ct: preserve tc_skb_cb across defragmentation
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-43466
32Monitor
net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linux kernelMay 8, 2026
CVE-2019-17185
31Monitor
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
freeradius · freeradiusMar 20, 2020
CVE-2018-4027
31Monitor
An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the An
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
anker-in · roav dashcam a1 firmwareMay 13, 2019
CVE-2020-36208
31Monitor
An issue was discovered in the conquer-once crate before 0.3.2 for Rust.
HighCVSS 7.8No exploitEPSS 0%
conquer-once project · conquer-onceJan 26, 2021
CVE-2019-5675
31Monitor
NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handl
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
nvidia · gpu driverMay 10, 2019
CVE-2026-68404
31Monitor
wifi: cfg80211: use wiphy work for socket owner autodisconnect
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 10, 2026
CVE-2026-64556
31Monitor
perf/core: Detach event groups during remove_on_exec
HighCVSS 7.8No exploitEPSS 0%
linux · linuxJul 29, 2026
CVE-2026-31479
31Monitor
drm/xe: always keep track of remap prev/next
HighCVSS 7.8No exploitEPSS 0%
linux · linux kernelApr 22, 2026
CVE-2021-20592
30Monitor
Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model com
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
mitsubishielectric · gt softgot2000Aug 5, 2021
CVE-2019-16137
30Monitor
An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
spin-rs project · spin-rsSep 9, 2019
CVE-2020-36215
30Monitor
An issue was discovered in the hashconsing crate before 1.1.0 for Rust.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
hashconsing project · hashconsingJan 26, 2021
CVE-2020-14098
30Monitor
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
mi · ax1800 firmwareJan 13, 2021
CVE-2024-7409
30Monitor
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
red hat · red hat enterprise linux 8Aug 5, 2024
CVE-2026-64312
30Monitor
crypto: pcrypt - restore callback for non-parallel fallback
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linux kernelJul 25, 2026
CVE-2020-36211
28Monitor
An issue was discovered in the gfwx crate before 0.3.0 for Rust.
HighCVSS 7.0No exploitEPSS 0%
devolutions · gfwxJan 26, 2021
CVE-2020-36207
28Monitor
An issue was discovered in the aovec crate through 2020-12-10 for Rust.
HighCVSS 7.0No exploitEPSS 0%
aovec project · aovecJan 26, 2021
CVE-2020-36206
28Monitor
An issue was discovered in the rusb crate before 0.7.0 for Rust.
HighCVSS 7.0No exploitEPSS 0%
rusb project · rusbJan 26, 2021
CVE-2026-68103
28Monitor
drm/amdgpu: reject mapping a reserved doorbell to a new queue
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 10, 2026

All vulnerability classes