CWE-367 · 773 kayıt
Time-of-check Time-of-use (TOCTOU) Race Condition
Bu sınıftaki CVE’ler
776 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
78Bu hafta | CVE-2024-30088Silahlaştırılmış | Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-367 | Yüksek7,0 | KEV | %68,2 | 11 Haz 2024 |
70Bu hafta | CVE-2023-35311Silahlaştırılmış | Microsoft Outlook Security Feature Bypass Vulnerabilitymicrosoft · 365 apps · CWE-367 | Yüksek8,8 | KEV | %15,5 | 11 Tem 2023 |
62Bu hafta | CVE-2025-22224Silahlaştırılmış | VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.vmware · esxi · CWE-367 | Yüksek8,2 | KEV | %1,6 | 4 Mar 2025 |
61Bu hafta | CVE-2025-38352Silahlaştırılmış | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()linux · linux kernel · CWE-367 | Yüksek7,8 | KEV | %1,3 | 22 Tem 2025 |
58Planlayın | CVE-2022-48618Silahlaştırılmış | The issue was addressed with improved checks.apple · ipados · CWE-367 | Yüksek7,0 | KEV | %0,5 | 9 Oca 2024 |
57Planlayın | CVE-2022-36980İstismar yok | This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.ivanti · avalanche · CWE-367 | Yüksek8,1 | — | %83,1 | 29 Mar 2023 |
54Planlayın | CVE-2025-34027Kavram kanıtı | Versa Concerto Authentication Bypass File Write Remote Code Executionversa-networks · concerto · CWE-367 | Kritik10,0 | — | %45,2 | 21 May 2025 |
49Planlayın | CVE-2024-50379Kavram kanıtı | Apache Tomcat: RCE due to TOCTOU issue in JSP compilationapache · tomcat · CWE-367 | Kritik9,8 | — | %31,8 | 17 Ara 2024 |
46Planlayın | CVE-2023-38146Silahlaştırılmış | Windows Themes Remote Code Execution Vulnerabilitymicrosoft · windows 11 21h2 · CWE-367 | Yüksek8,8 | — | %37,4 | 12 Eyl 2023 |
45Planlayın | CVE-2024-0132Kavram kanıtı | NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration nvidia · nvidia container toolkit · CWE-367 | Yüksek8,3 | — | %40,8 | 26 Eyl 2024 |
42Planlayın | CVE-2024-56337İstismar yok | Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incompleteapache · tomcat · CWE-367 | Kritik9,8 | — | %9,0 | 20 Ara 2024 |
40Planlayın | CVE-2019-7249İstismar yok | In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one usekeybase · keybase · CWE-367 | Kritik9,8 | — | %2,5 | 31 Oca 2019 |
40Planlayın | CVE-2025-64180İstismar yok | Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)manager-io · manager · CWE-367 | Kritik10,0 | — | %0,3 | 7 Kas 2025 |
39İzleyin | CVE-2024-43452İstismar yok | Windows Registry Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-367 | Yüksek7,5 | — | %28,4 | 12 Kas 2024 |
39İzleyin | CVE-2019-5421İstismar yok | Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable`plataformatec · devise · CWE-367 | Kritik9,8 | — | %1,6 | 3 Nis 2019 |
39İzleyin | CVE-2024-28718İstismar yok | An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py.openstack · magnum · CWE-367 | Kritik9,8 | — | %1,1 | 12 Nis 2024 |
39İzleyin | CVE-2023-33154İstismar yok | Windows Partition Management Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-367 | Kritik9,8 | — | %0,8 | 11 Tem 2023 |
39İzleyin | CVE-2026-64091İstismar yok | batman-adv: tt: fix TOCTOU race for reported vlanslinux · linux kernel · CWE-367 | Kritik9,8 | — | %0,6 | 19 Tem 2026 |
39İzleyin | CVE-2026-68488İstismar yok | A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to rootwebpros · plesk · CWE-367 | Kritik9,9 | — | %0,4 | 10 Eyl 2026 |
39İzleyin | CVE-2026-63297İstismar yok | Cross-project instance copy bypasses target project restrictions via TOCTOU in config mergecanonical · lxd · CWE-367 | Kritik9,9 | — | %0,3 | 12 Ağu 2026 |
39İzleyin | GHSA-c85p-9pvr-f7f5İstismar yok | Duplicate Advisory: OpenClaw: Node pairing reconnection could confuse approval scope statenpm · openclaw · CWE-367 | Kritik9,8 | — | — | 13 Haz 2026 |
37İzleyin | CVE-2026-78319İstismar yok | TOCTOU Vulnerability in file exchangesauter · modu680-as · CWE-367 | Kritik9,3 | — | %0,6 | 1 Eyl 2026 |
37İzleyin | CVE-2026-25728İstismar yok | ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Conditionoxygenz · clipbucket · CWE-367 | Kritik9,3 | — | %0,4 | 10 Şub 2026 |
37İzleyin | CVE-2026-25052İstismar yok | n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Usersn8n · n8n · CWE-367 | Kritik9,4 | — | %0,3 | 4 Şub 2026 |
37İzleyin | CVE-2025-58151İstismar yok | varstored: TOCTOU issues with mapped guest memoryxen · varstored · CWE-367 | Kritik9,4 | — | %0,1 | 9 Tem 2026 |
- CVE-2024-3008878Bu hafta
Windows Kernel Elevation of Privilege Vulnerability
YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %68microsoft · windows 10 150711 Haz 2024
- CVE-2023-3531170Bu hafta
Microsoft Outlook Security Feature Bypass Vulnerability
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %16microsoft · 365 apps11 Tem 2023
- CVE-2025-2222462Bu hafta
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write.
YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %2vmware · esxi4 Mar 2025
- CVE-2025-3835261Bu hafta
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1linux · linux kernel22 Tem 2025
- CVE-2022-4861858Planlayın
The issue was addressed with improved checks.
YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %0apple · ipados9 Oca 2024
- CVE-2022-3698057Planlayın
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
YüksekCVSS 8,1İstismar yokEPSS %83ivanti · avalanche29 Mar 2023
- CVE-2025-3402754Planlayın
Versa Concerto Authentication Bypass File Write Remote Code Execution
KritikCVSS 10,0Kavram kanıtıEPSS %45versa-networks · concerto21 May 2025
- CVE-2024-5037949Planlayın
Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
KritikCVSS 9,8Kavram kanıtıEPSS %32apache · tomcat17 Ara 2024
- CVE-2023-3814646Planlayın
Windows Themes Remote Code Execution Vulnerability
YüksekCVSS 8,8SilahlaştırılmışEPSS %37microsoft · windows 11 21h212 Eyl 2023
- CVE-2024-013245Planlayın
NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration
YüksekCVSS 8,3Kavram kanıtıEPSS %41nvidia · nvidia container toolkit26 Eyl 2024
- CVE-2024-5633742Planlayın
Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete
KritikCVSS 9,8İstismar yokEPSS %9apache · tomcat20 Ara 2024
- CVE-2019-724940Planlayın
In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one use
KritikCVSS 9,8İstismar yokEPSS %3keybase · keybase31 Oca 2019
- CVE-2025-6418040Planlayın
Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)
KritikCVSS 10,0İstismar yokEPSS %0manager-io · manager7 Kas 2025
- CVE-2024-4345239İzleyin
Windows Registry Elevation of Privilege Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %28microsoft · windows 10 180912 Kas 2024
- CVE-2019-542139İzleyin
Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable`
KritikCVSS 9,8İstismar yokEPSS %2plataformatec · devise3 Nis 2019
- CVE-2024-2871839İzleyin
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py.
KritikCVSS 9,8İstismar yokEPSS %1openstack · magnum12 Nis 2024
- CVE-2023-3315439İzleyin
Windows Partition Management Driver Elevation of Privilege Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1microsoft · windows 10 150711 Tem 2023
- CVE-2026-6409139İzleyin
batman-adv: tt: fix TOCTOU race for reported vlans
KritikCVSS 9,8İstismar yokEPSS %1linux · linux kernel19 Tem 2026
- CVE-2026-6848839İzleyin
A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root
KritikCVSS 9,9İstismar yokEPSS %0webpros · plesk10 Eyl 2026
- CVE-2026-6329739İzleyin
Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
KritikCVSS 9,9İstismar yokEPSS %0canonical · lxd12 Ağu 2026
- GHSA-c85p-9pvr-f7f539İzleyin
Duplicate Advisory: OpenClaw: Node pairing reconnection could confuse approval scope state
KritikCVSS 9,8İstismar yoknpm · openclaw13 Haz 2026
- CVE-2026-7831937İzleyin
TOCTOU Vulnerability in file exchange
KritikCVSS 9,3İstismar yokEPSS %1sauter · modu680-as1 Eyl 2026
- CVE-2026-2572837İzleyin
ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition
KritikCVSS 9,3İstismar yokEPSS %0oxygenz · clipbucket10 Şub 2026
- CVE-2026-2505237İzleyin
n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users
KritikCVSS 9,4İstismar yokEPSS %0n8n · n8n4 Şub 2026
- CVE-2025-5815137İzleyin
varstored: TOCTOU issues with mapped guest memory
KritikCVSS 9,4İstismar yokEPSS %0xen · varstored9 Tem 2026