Browse CVEs

HIGH 7.0 CVE-2025-54115 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to eleva… Windows 10 1809 10.0.17763.7792 / 10.0.19044.6332+ Fix from $1,9502025-09-09 HIGH 7.0 CVE-2025-54108 Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows a… Windows 11 24h2 10.0.26100.6508+ Fix from $1,9502025-09-09 HIGH 7.0 CVE-2025-54105 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized a… Windows 11 24h2 10.0.25398.1849 / 10.0.26100.6508+ Fix from $1,9502025-09-09 HIGH 7.8 CVE-2025-54092 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to eleva… Windows 10 1809 10.0.17763.7792 / 10.0.19044.6332+ Fix from $1,9502025-09-09 HIGH 7.0 CVE-2025-53807 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized atta… Windows 10 1809 10.0.17763.7792 / 10.0.19044.6332+ Fix from $1,9502025-09-09 MEDIUM 5.3 CVE-2025-47997 Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose i… Sql Server 2016 13.0.6470.1 / 13.0.7065.1+ Fix from $1,6002025-09-09 HIGH 7.3 CVE-2025-48548 In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to a race co… Android Patch available Fix from $1,9502025-09-04 HIGH 7.0 CVE-2025-48533 In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to… Android Mitigation only Fix from $1,9502025-09-04 MEDIUM 6.5 CVE-2025-23259 NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information d… No fix yet Fix from $1,6002025-09-04 HIGH 7.0 CVE-2025-22442 In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work prof… Android Mitigation only Fix from $1,9502025-09-02 HIGH 7.5 CVE-2025-55231 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to exe… Windows Server 2012 10.0.14393.8416 / 10.0.17763.7783+ Fix from $1,9502025-08-21 HIGH 8.8 CVE-2025-8880 Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… Chrome 139.0.7258.127+ Fix from $1,9502025-08-13 MEDIUM 5.1 CVE-2025-49456 Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local acc… Meeting Software Development Kit 6.2.15 / 6.3.12+ Fix from $1,6002025-08-12 HIGH 7.0 CVE-2025-53135 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to eleva… Windows 10 1507 10.0.10240.21100 / 10.0.14393.8330+ Fix from $1,9502025-08-12 HIGH 8.1 CVE-2025-50177 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Windows 10 1507 10.0.10240.21100 / 10.0.14393.8330+ Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-53132 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to… Windows 10 1507 10.0.10240.21100 / 10.0.14393.8330+ Fix from $1,9502025-08-12 HIGH 7.5 CVE-2025-50169 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an unauthorized attacker to execute… Windows 11 24h2 10.0.26100.4851+ Fix from $1,9502025-08-12 HIGH 7.0 CVE-2025-50167 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to eleva… Windows 10 1507 10.0.10240.21100 / 10.0.14393.8330+ Fix from $1,9502025-08-12 HIGH 7.0 CVE-2025-49762 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows a… Windows 10 1507 10.0.10240.21100 / 10.0.14393.8330+ Fix from $1,9502025-08-12 MEDIUM 6.7 CVE-2025-49743 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized atta… Windows 10 1507 10.0.10240.21100 / 10.0.14393.8330+ Fix from $1,6002025-08-12 MEDIUM 6.7 CVE-2025-22830 APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerabil… Aptio V 5.040+ Fix from $1,6002025-08-12 HIGH 7.0 CVE-2025-27577 in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition. Openharmony after 5.0.3 Fix from $1,9502025-08-11 HIGH 7.0 CVE-2025-25278 in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition. Openharmony after 5.0.3 Fix from $1,9502025-08-11 HIGH 7.0 CVE-2025-47907 Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can resu… Go 1.23.12 / 1.24.6+ Fix from $1,9502025-08-07 HIGH 8.1 CVE-2025-7954 A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended vouche… Shopware 6.7.2.0+ Fix from $1,9502025-08-06 HIGH 8.1 CVE-2025-54955 OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can lead to ful… Patch available Fix from $1,9502025-08-03 CRITICAL 9.8 CVE-2025-43275 A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An a… macOS 13.7.7 / 14.7.7+ Fix from $2,3002025-07-30 CRITICAL 9.8 CVE-2025-43244 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An… macOS 13.7.7 / 14.7.7+ Fix from $2,3002025-07-30 HIGH 7.5 CVE-2025-25214 A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A series … Avideo No fix yet Fix from $1,9502025-07-24 MEDIUM 6.5 CVE-2025-45731 A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are… 2fauth Patch available Fix from $1,6002025-07-24