Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CWE-367

MITRE ↗

CWE-367

32
CRITICAL
378
HIGH
280
MEDIUM
46
LOW
770 CVEs · Page 7/16
7.8
CVE-2024-13961

Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 o

7.8
CVE-2025-21485

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.

7.8
CVE-2025-49730

Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to el

7.8
CVE-2025-38352 KEV

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu

7.8
CVE-2025-21455

Memory corruption while submitting blob data to kernel space though IOCTL.

7.8
CVE-2025-21473

Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.

7.8
CVE-2025-27076

Memory corruption while processing simultaneous requests via escape path.

7.8
CVE-2025-20074

Time-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite software installers before ver

7.8
CVE-2025-54895

Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privilege

7.8
CVE-2025-55680

Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacke

7.8
CVE-2025-55696

Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized at

7.8
CVE-2025-34290

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerabili

7.7
CVE-2025-29833

Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to exec

7.7
CVE-2024-9183

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 prior to 18.4.5, 18.5 prior to 18.5.3, a

7.7
CVE-2025-64645

IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbo

7.5
CVE-2024-42444

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful e

7.5
CVE-2024-41917

Time-of-check time-of-use race condition for some Intel(R) Battery Life Diagnostic Tool software before version 2.4.1 ma

7.5
CVE-2024-54084

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition

7.5
CVE-2024-42446

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition

7.5
CVE-2025-29969

Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code

7.5
CVE-2025-20082

Time-of-check time-of-use race condition in the UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50F

7.5
CVE-2025-62003

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connect

7.5
CVE-2025-62004

BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup. A local,

7.4
CVE-2025-58407

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU rac

7.4
CVE-2025-69211

Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL

7.3
CVE-2025-55236

Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code local

7.2
CVE-2025-20037

Time-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allo

7.0
CVE-2025-24036

Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

7.0
CVE-2025-21191

Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacke

7.0
CVE-2025-38461

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment

7.0
CVE-2025-23279

NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to esc

7.0
CVE-2025-50158

Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose informatio

7.0
CVE-2025-53134

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio

7.0
CVE-2025-53788

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevat

7.0
CVE-2025-54093

Time-of-check time-of-use (toctou) race condition in Windows TCP/IP allows an authorized attacker to elevate privileges

7.0
CVE-2025-59261

Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to eleva

7.0
CVE-2025-59497

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny

7.0
CVE-2011-10035

Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update

7.0
CVE-2025-61037

A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-

6.8
CVE-2025-48001

Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a secur

6.8
CVE-2025-48818

Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a secur

6.8
CVE-2025-9810

TOCTOU  in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions

6.7
CVE-2025-22394

Dell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabil

6.6
CVE-2024-53016

Memory corruption while processing I2C settings in Camera driver.

6.6
CVE-2024-53018

Memory corruption may occur while processing the OIS packet parser.

6.6
CVE-2025-58131

Race condition in the Zoom Workplace VDI Plugin macOS Universal installer for VMware Horizon before version 6.4.10 (or b

6.5
CVE-2025-3599

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevat

6.3
CVE-2025-62511

yt-grabber-tui is a C++ terminal user interface application for downloading YouTube content. yt-grabber-tui version 1.0

6.3
CVE-2025-68146

filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTO

6.1
CVE-2025-44002

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows a

Frequently Asked Questions

What is CWE-367?

CWE-367 (CWE-367) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-367?

There are 938 CVE records associated with CWE-367 in our database. Of these, 32 are critical severity, 378 are high severity, and 280 are medium severity.

How can I protect against CWE-367 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-367 using AI-powered security agents.

Detect CWE-367 Vulnerabilities

CyberStrike's AI agents automatically detect cwe-367 vulnerabilities across your infrastructure.

Get Started