Browse CVEs

MEDIUM 5.1 CVE-2026-28888 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An a… macOS 14.8.5 / 15.7.5+ Fix from $1,6002026-03-25 HIGH 8.1 CVE-2026-28891 A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app… macOS 14.8.5 / 15.7.5+ Fix from $1,9502026-03-25 MEDIUM 5.1 CVE-2026-28834 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An a… macOS 14.8.5 / 15.7.5+ Fix from $1,6002026-03-25 HIGH 8.1 CVE-2026-28817 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A sa… macOS 14.8.5 / 15.7.5+ Fix from $1,9502026-03-25 HIGH 7.5 CVE-2025-33238 NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception. A successful exploit of this … Triton Inference Server 26.01+ Fix from $1,9502026-03-24 HIGH 7.5 CVE-2025-33254 NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption. A successful exploit of this vulnerabi… Triton Inference Server 26.01+ Fix from $1,9502026-03-24 HIGH 7.5 CVE-2026-4684 Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140… Firefox 115.34.0 / 140.9.0+ Fix from $1,9502026-03-24 HIGH 7.7 CVE-2026-4368 Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual se… Mitigation only Fix from $1,9502026-03-23 HIGH 7.4 CVE-2026-32887 Effect is a TypeScript framework that consists of several packages that work together to help build TypeScript applications. Prior to version 3.20.0,… Effect 3.20.0+ Fix from $1,9502026-03-20 HIGH 7.8 CVE-2026-23271 In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Make sure … Linux Kernel 6.1.167 / 6.6.130+ Fix from $1,9502026-03-20 MEDIUM 5.3 CVE-2026-32700 Devise is an authentication solution for Rails based on Warden. Prior to version 5.0.3, a race condition in Devise's Confirmable module allows an att… Devise 5.0.3+ Fix from $1,6002026-03-18 MEDIUM 6.5 CVE-2026-32398 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Subrata Mal TeraWallet – For WooCommerce… Mitigation only Fix from $1,6002026-03-13 HIGH 7.4 CVE-2026-32242 Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.11 and 8.6.37, Parse Ser… Parse Server 8.6.37 / 9.6.0+ Fix from $1,9502026-03-12 MEDIUM 5.9 CVE-2026-31824 Sylius is an Open Source eCommerce Framework on Symfony. A Time-of-Check To Time-of-Use (TOCTOU) race condition was discovered in the promotion usage… Sylius 1.9.12 / 1.10.16+ Fix from $1,6002026-03-10 HIGH 7.1 CVE-2026-31827 Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and recreates the MongoDB TTL… Mitigation only Fix from $1,9502026-03-10 HIGH 7.4 CVE-2026-0112 In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.0 CVE-2026-24296 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorize… Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 HIGH 7.0 CVE-2026-24295 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorize… Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 HIGH 7.0 CVE-2026-23668 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized atta… Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 HIGH 7.0 CVE-2026-23671 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth RFCOM Protocol Driver allows an auth… Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 HIGH 7.8 CVE-2026-23239 In the Linux kernel, the following vulnerability has been resolved: espintcp: Fix race condition in espintcp_close() This issue was discovered duri… Linux Kernel 6.12.75 / 6.18.16+ Fix from $1,9502026-03-10 CRITICAL 9.8 CVE-2026-23240 In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered du… Linux Kernel 6.12.75 / 6.18.16+ Fix from $2,3002026-03-10 HIGH 7.5 CVE-2026-28789 OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.3, an unauthenticated denial-of-service vulnerabili… Olivetin after 3000.10.2 Fix from $1,9502026-03-05 HIGH 7.0 CVE-2025-48641 In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no … Android No fix yet Fix from $1,9502026-03-02 HIGH 7.4 CVE-2025-48577 In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local escalatio… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.4 CVE-2025-48568 In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additi… Android Mitigation only Fix from $1,9502026-03-02 MEDIUM 5.8 CVE-2026-27189 OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below, use non-atomi… Opensift 1.1.3+ Fix from $1,6002026-02-21 HIGH 7.5 CVE-2026-26201 emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchro… Emp3r0r 3.21.2+ Fix from $1,9502026-02-19 HIGH 7.0 CVE-2025-71221 In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Add proper lockin… Linux Kernel 6.18.10+ Fix from $1,9502026-02-14 CRITICAL 9.0 CVE-2026-20677 A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.… Ipados 14.8.4 / 18.7.5+ Fix from $2,3002026-02-11