CWE-367 · 883 kayıt
Time-of-check Time-of-use (TOCTOU) Race Condition
Bu sınıftaki CVE’ler
886 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
78Bu hafta | CVE-2024-30088Silahlaştırılmış | Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-367 | Yüksek7,0 | KEV | %68,2 | 11 Haz 2024 |
70Bu hafta | CVE-2023-35311Silahlaştırılmış | Microsoft Outlook Security Feature Bypass Vulnerabilitymicrosoft · 365 apps · CWE-367 | Yüksek8,8 | KEV | %15,5 | 11 Tem 2023 |
62Bu hafta | CVE-2025-22224Silahlaştırılmış | VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.vmware · esxi · CWE-367 | Yüksek8,2 | KEV | %1,5 | 4 Mar 2025 |
62Bu hafta | CVE-2026-119977Silahlaştırılmış | WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Executionwordpress · wordpress · CWE-367 | Yüksek8,1 | KEV | %1,1 | 31 Eki 2026 |
61Bu hafta | CVE-2025-38352Silahlaştırılmış | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()linux · linux kernel · CWE-367 | Yüksek7,8 | KEV | %1,3 | 22 Tem 2025 |
60Bu hafta | CVE-2023-38146Silahlaştırılmış | Windows Themes Remote Code Execution Vulnerabilitymicrosoft · windows 11 21h2 · CWE-367 | Yüksek8,8 | — | %37,3 | 12 Eyl 2023 |
58Planlayın | CVE-2022-48618Silahlaştırılmış | The issue was addressed with improved checks.apple · ipados · CWE-367 | Yüksek7,0 | KEV | %0,4 | 9 Oca 2024 |
57Planlayın | CVE-2022-36980İstismar yok | This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.ivanti · avalanche · CWE-367 | Yüksek8,1 | — | %82,4 | 29 Mar 2023 |
54Planlayın | CVE-2025-34027Kavram kanıtı | Versa Concerto Authentication Bypass File Write Remote Code Executionversa-networks · concerto · CWE-367 | Kritik10,0 | — | %46,4 | 21 May 2025 |
49Planlayın | CVE-2024-50379Kavram kanıtı | Apache Tomcat: RCE due to TOCTOU issue in JSP compilationapache · tomcat · CWE-367 | Kritik9,8 | — | %31,8 | 17 Ara 2024 |
45Planlayın | CVE-2024-0132Kavram kanıtı | NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration nvidia · nvidia container toolkit · CWE-367 | Yüksek8,3 | — | %40,8 | 26 Eyl 2024 |
42Planlayın | CVE-2024-56337İstismar yok | Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incompleteapache · tomcat · CWE-367 | Kritik9,8 | — | %8,9 | 20 Ara 2024 |
40Planlayın | CVE-2020-1337Silahlaştırılmış | Windows Print Spooler Elevation of Privilege Vulnerabilitymicrosoft · windows 10 · CWE-367 | Yüksek7,8 | — | %14,1 | 17 Ağu 2020 |
40Planlayın | CVE-2019-7249İstismar yok | In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one usekeybase · keybase · CWE-367 | Kritik9,8 | — | %2,5 | 31 Oca 2019 |
40Planlayın | CVE-2025-64180İstismar yok | Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)manager-io · manager · CWE-367 | Kritik10,0 | — | %0,3 | 7 Kas 2025 |
39İzleyin | CVE-2024-43452İstismar yok | Windows Registry Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-367 | Yüksek7,5 | — | %30,1 | 12 Kas 2024 |
39İzleyin | CVE-2019-5421İstismar yok | Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable`plataformatec · devise · CWE-367 | Kritik9,8 | — | %1,5 | 3 Nis 2019 |
39İzleyin | CVE-2024-28718İstismar yok | An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py.openstack · magnum · CWE-367 | Kritik9,8 | — | %1,0 | 12 Nis 2024 |
39İzleyin | CVE-2023-33154İstismar yok | Windows Partition Management Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-367 | Kritik9,8 | — | %0,7 | 11 Tem 2023 |
39İzleyin | CVE-2026-64091İstismar yok | batman-adv: tt: fix TOCTOU race for reported vlanslinux · linux kernel · CWE-367 | Kritik9,8 | — | %0,4 | 19 Tem 2026 |
39İzleyin | CVE-2026-68488İstismar yok | A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to rootwebpros · plesk · CWE-367 | Kritik9,9 | — | %0,3 | 10 Eyl 2026 |
39İzleyin | CVE-2026-63297İstismar yok | Cross-project instance copy bypasses target project restrictions via TOCTOU in config mergecanonical · lxd · CWE-367 | Kritik9,9 | — | %0,3 | 12 Ağu 2026 |
38İzleyin | CVE-2026-113078İstismar yok | Race condition in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to google · chrome · CWE-367 | Kritik9,6 | — | %0,3 | 20 Eki 2026 |
37İzleyin | CVE-2026-78319İstismar yok | TOCTOU Vulnerability in file exchangesauter · modu680-as · CWE-367 | Kritik9,3 | — | %0,6 | 1 Eyl 2026 |
37İzleyin | CVE-2026-25728İstismar yok | ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Conditionoxygenz · clipbucket · CWE-367 | Kritik9,3 | — | %0,3 | 10 Şub 2026 |
- CVE-2024-3008878Bu hafta
Windows Kernel Elevation of Privilege Vulnerability
YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %68microsoft · windows 10 150711 Haz 2024
- CVE-2023-3531170Bu hafta
Microsoft Outlook Security Feature Bypass Vulnerability
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %15microsoft · 365 apps11 Tem 2023
- CVE-2025-2222462Bu hafta
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.
YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %1vmware · esxi4 Mar 2025
- CVE-2026-11997762Bu hafta
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %1wordpress · wordpress31 Eki 2026
- CVE-2025-3835261Bu hafta
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1linux · linux kernel22 Tem 2025
- CVE-2023-3814660Bu hafta
Windows Themes Remote Code Execution Vulnerability
YüksekCVSS 8,8SilahlaştırılmışEPSS %37microsoft · windows 11 21h212 Eyl 2023
- CVE-2022-4861858Planlayın
The issue was addressed with improved checks.
YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %0apple · ipados9 Oca 2024
- CVE-2022-3698057Planlayın
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
YüksekCVSS 8,1İstismar yokEPSS %82ivanti · avalanche29 Mar 2023
- CVE-2025-3402754Planlayın
Versa Concerto Authentication Bypass File Write Remote Code Execution
KritikCVSS 10,0Kavram kanıtıEPSS %46versa-networks · concerto21 May 2025
- CVE-2024-5037949Planlayın
Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
KritikCVSS 9,8Kavram kanıtıEPSS %31apache · tomcat17 Ara 2024
- CVE-2024-013245Planlayın
NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration
YüksekCVSS 8,3Kavram kanıtıEPSS %40nvidia · nvidia container toolkit26 Eyl 2024
- CVE-2024-5633742Planlayın
Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete
KritikCVSS 9,8İstismar yokEPSS %8apache · tomcat20 Ara 2024
- CVE-2020-133740Planlayın
Windows Print Spooler Elevation of Privilege Vulnerability
YüksekCVSS 7,8SilahlaştırılmışEPSS %14microsoft · windows 1017 Ağu 2020
- CVE-2019-724940Planlayın
In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one use
KritikCVSS 9,8İstismar yokEPSS %2keybase · keybase31 Oca 2019
- CVE-2025-6418040Planlayın
Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)
KritikCVSS 10,0İstismar yokEPSS %0manager-io · manager7 Kas 2025
- CVE-2024-4345239İzleyin
Windows Registry Elevation of Privilege Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %30microsoft · windows 10 180912 Kas 2024
- CVE-2019-542139İzleyin
Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable`
KritikCVSS 9,8İstismar yokEPSS %1plataformatec · devise3 Nis 2019
- CVE-2024-2871839İzleyin
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py.
KritikCVSS 9,8İstismar yokEPSS %1openstack · magnum12 Nis 2024
- CVE-2023-3315439İzleyin
Windows Partition Management Driver Elevation of Privilege Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0microsoft · windows 10 150711 Tem 2023
- CVE-2026-6409139İzleyin
batman-adv: tt: fix TOCTOU race for reported vlans
KritikCVSS 9,8İstismar yokEPSS %0linux · linux kernel19 Tem 2026
- CVE-2026-6848839İzleyin
A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root
KritikCVSS 9,9İstismar yokEPSS %0webpros · plesk10 Eyl 2026
- CVE-2026-6329739İzleyin
Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
KritikCVSS 9,9İstismar yokEPSS %0canonical · lxd12 Ağu 2026
- CVE-2026-11307838İzleyin
Race condition in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to
KritikCVSS 9,6İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-7831937İzleyin
TOCTOU Vulnerability in file exchange
KritikCVSS 9,3İstismar yokEPSS %0sauter · modu680-as1 Eyl 2026
- CVE-2026-2572837İzleyin
ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition
KritikCVSS 9,3İstismar yokEPSS %0oxygenz · clipbucket10 Şub 2026