Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.30%via NVD

CVE-2026-20815High· 7.0

9mo ago

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_11_24h2EPSS 0.29%via NVD

CVE-2026-20814High· 7.0

9mo ago

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.29%via NVD

CVE-2026-20808High· 7.0

9mo ago

Concurrent execution using shared resource with improper synchronization ('race condition') in Printer Association Object allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_11_24h2EPSS 0.29%via NVD

CVE-2025-20801High· 7.0

10mo ago

In seninf, there is a possible memory corruption due to a race condition

In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. P…

▾ Twilightgoogle · androidEPSS 0.06%via NVD

CVE-2025-15244Low· 3.7

10mo ago

A vulnerability has been found in PHPEMS up to 11.0

A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request Handler. The manipulation leads to race condition. The attack may be initiated remotely. A high degree of complexity …

▾ Sunlitphpems · phpemsEPSS 0.41%via NVD

CVE-2025-15242Low· 3.1

10mo ago

A vulnerability was detected in PHPEMS up to 11.0

A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function of the component Coupon Handler. Performing a manipulation results in race condition. The attack can be initiated remotely. The complexity of …

▾ Sunlitphpems · phpemsEPSS 0.24%via NVD

CVE-2025-15116Low· 3.7

10mo ago

A security flaw has been discovered in OpenCart up to 4.1.0.3

A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unknown functionality of the component Single-Use Coupon Handler. Performing a manipulation results in race condition. The attack may be initia…

▾ Sunlitopencart · opencartEPSS 0.41%via NVD

CVE-2025-68749High· 7.8

10mo ago

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_bo_free() removes the BO from the BO…

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition when unbinding BOs Fix 'Memory manager not clean during takedown' warning that occurs when ivpu_gem_bo_free() removes the BO from the BO…

▾ Twilightlinux · linux_kernelEPSS 0.11%via NVD

CVE-2025-43531Low· 3.1

10mo ago

A race condition was addressed with improved state handling

A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously cra…

▾ Sunlitapple · safariEPSS 0.45%via NVD

CVE-2025-68214Medium· 4.7

10mo ago

In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition between timer_shutdown_sync() and timer expiration that can lead to hitting a…

In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition between timer_shutdown_sync() and timer expiration that can lead to hitting a…

▾ Sunlitlinux · linux_kernelEPSS 0.13%via NVD

CVE-2025-13231Medium· 6.5

10mo ago

The Fancy Product Designer plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.4.8

The Fancy Product Designer plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.4.8. This is due to a time-of-check/time-of-use (TOCTOU) race condition in the 'url' parameter of the fp…

▾ SunlitEPSS 0.18%via NVD

CVE-2025-66446High· 8.8

11mo ago

MaxKB is an open-source AI assistant for enterprise

MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dynamic linker and other critical files, potentially resulting in privilege esca…

▾ Twilightmaxkb · maxkbEPSS 0.35%via NVD

CVE-2025-66419High· 8.8

11mo ago

MaxKB is an open-source AI assistant for enterprise

MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in ve…

▾ Twilightmaxkb · maxkbEPSS 0.31%via NVD

CVE-2025-36934High· 7.4

11mo ago

In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition

In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User intera…

▾ Twilightgoogle · androidEPSS 0.10%via NVD

CVE-2025-36916High· 7.0

11mo ago

In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition

In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

▾ Twilightgoogle · androidEPSS 0.06%via NVD

CVE-2025-67505High· 8.4

11mo ago

Okta Java Management SDK facilitates interactions with the Okta management API

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response h…

▾ Twilightokta · java_management_sdkEPSS 0.21%via NVD

CVE-2025-62469High· 7.0

11mo ago

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_11_24h2EPSS 0.25%via NVD

CVE-2025-64661High· 7.8

11mo ago

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.25%via NVD

CVE-2025-64658High· 7.5

11mo ago

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1809EPSS 0.31%via NVD

CVE-2025-66328High· 8.4

11mo ago

Multi-thread race condition vulnerability in the network management module

Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect availability.

▾ Twilighthuawei · harmonyosEPSS 0.07%via NVD

CVE-2025-66327High· 7.1

11mo ago

Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

▾ Twilighthuawei · harmonyosEPSS 0.07%via NVD