CWE-367

A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted w

A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the

OpenClaw before 2026.4.10 contains a time-of-check-time-of-use vulnerability in the validateScriptFileForShellBleed func

Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi stored API keys and OAuth credentials in auth.json

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user ac

A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker t

Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and applicati

Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an e

Time-of-check time-of-use race condition in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an in

A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in  cosmic-greete

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privi

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a loca

When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separ

A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly cre

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the globa

MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a server-side request forge

Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has

SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivilege

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a loc

Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verifica

Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC

FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, a race condition in the

varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF

A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, are vulne

Time-of-check time-of-use (TOCTOU) vulnerability combined with missing input validation in Caliptra Core ROM (UpdateRese

Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device

n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git node clone operation

Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one c

Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vul

Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privela

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security rest

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds w

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escal

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default co

MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation.

Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect

Memory corruption while parsing the memory map info in IOCTL calls.

Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the driver of the NDD Print solution, which

Memory corruption may occur while processing message from frontend during allocation.

Memory corruption may occur in keyboard virtual device due to guest VM interaction.

In the Linux kernel, the following vulnerability has been resolved: Revert "openvswitch: switch to per-action label cou

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shar

Memory corruption when blob structure is modified by user-space after kernel verification.

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.

Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Wi