CVE Database

CVE-2025-66326 Medium · 4.7 CWE-362 Dec 8, 2025

Race Condition in Huawei Harmonyos

Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66322 Medium · 4.7 CWE-362 Dec 8, 2025

Race Condition in Huawei Harmonyos

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66321 Medium · 4.7 CWE-362 Dec 8, 2025

Race Condition in Huawei Harmonyos

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-66320 Medium · 4.7 CWE-362 Dec 8, 2025

Race Condition in Huawei Harmonyos

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-13721 High · 7.5 CWE-362 Dec 2, 2025

Race Condition in Google Chrome

Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2025-20765 Medium · 4.7 CWE-362 Dec 2, 2025

Race Condition in Linuxfoundation Yocto

In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833.

CVE-2025-64313 Medium · 5.5 CWE-362 Nov 28, 2025

Race Condition in Huawei Harmonyos

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-58316 Medium · 5.5 CWE-362 Nov 28, 2025

Race Condition in Huawei Harmonyos

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability.

CVE-2025-12472 High · 7.1 CWE-362 Nov 19, 2025

Remote Code Execution in Looker due to Improperly Validated Directory Deletion

An attacker with a Looker Developer role could manipulate a LookML project to exploit a race condition during Git directory deletion, leading to arbitrary command execution on the Looker instance. Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted instances. No user action is required for these. Self-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted. The versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page https://download.looker.com/ : * 24.12.103+ * 24.18.195+ * 25.0.72+ * 25.6.60+ * 25.8.42+ * 25.10.22+

CVE-2025-12383 High · 7.4 CWE-362 Nov 18, 2025

Race Condition allows Bypass of Trust Restrictions

In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain conditions, it could lead to unauthorized trust in insecure servers (see PoC)

CVE-2024-7017 High · 7.5 CWE-362 Nov 14, 2025

Race Condition in Google Chrome

Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2025-64345 Low · 1.8 CWE-362 Nov 12, 2025

Wasmtime provides unsound API access to a WebAssembly shared linear memory

Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host (Rust) to the contents of the linear memory. This is not sound for shared linear memories, which could be modified in parallel, and this could lead to a data race in the host. Patch releases have been issued for all supported versions of Wasmtime, notably: 24.0.5, 36.0.3, 37.0.3, and 38.0.4. These releases reject creation of shared memories via `Memory::new` and shared memories are now excluded from core dumps. As a workaround, eembeddings affected by this issue should use `SharedMemory::new` instead of `Memory::new` to create shared memories. Affected embeddings should also disable core dumps if they are unable to upgrade. Note that core dumps are disabled by default but the wasm threads proposal (and shared memory) is enabled by default.

CVE-2025-62218 High · 7.0 CWE-362 Nov 11, 2025

Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

CVE-2025-62217 High · 7.0 CWE-362 Nov 11, 2025

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2025-62215 High · 7.0 KEV High · 69 Public exploit CWE-362 Nov 11, 2025

Microsoft Windows Race Condition Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2025-60723 Medium · 6.3 CWE-362 Nov 11, 2025

DirectX Graphics Kernel Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny service over a network.

CVE-2025-59508 High · 7.0 CWE-362 Nov 11, 2025

Windows Speech Recognition Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.

CVE-2025-59507 High · 7.0 CWE-362 Nov 11, 2025

Windows Speech Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.

CVE-2025-59506 High · 7.0 CWE-362 Nov 11, 2025

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.

CVE-2025-64773 Low · 3.7 CWE-362 Nov 11, 2025

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit

CVE-2025-13012 High · 7.5 CWE-362 Nov 11, 2025

Race condition in the Graphics component

Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.

CVE-2025-12434 Medium · 4.2 CWE-362 Nov 10, 2025

Race Condition in Google Chrome

Race in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2025-12432 High · 8.8 CWE-362 Nov 10, 2025

Race Condition in Google Chrome

Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-64683 High · 7.5 CWE-362 Nov 10, 2025

Race Condition in Jetbrains Hub

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API

CVE-2025-64682 Low · 3.7 CWE-362 Nov 10, 2025

Race Condition in Jetbrains Hub

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit