Falhas do tipo CWE-367

561 resultados

Condição de corrida entre verificação e uso (TOCTOU)

A aplicação verifica uma condição (ex: arquivo existe, usuário tem permissão) e depois atua sobre ela, mas entre a verificação e a ação outro processo pode alterar o estado. Um atacante explora esse intervalo para burlar controles de segurança ou acessar recursos que não deveria.

Exemplo

Um programa verifica se um arquivo é seguro para ler (if (arquivo_existe && nao_eh_symlink)), depois abre e processa. Um atacante substitui o arquivo por um symlink apontando para /etc/passwd entre a verificação e a leitura, conseguindo acessar dados sensíveis.

Como mitigar

Use operações atômicas do SO (open com flags O_NOFOLLOW, O_EXCL; fstat em vez de stat; operações que verificam e atuam em uma única chamada). Implemente locks/mutexes se lógica complexa for necessária, e valide o estado novamente após adquirir recurso.

CVE-2026-44112HIGHOpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge WritesEPSS 2.4%CVE-2026-20816HIGHWindows Installer Elevation of Privilege VulnerabilityEPSS 2.4%CVE-2024-24993HIGHA Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute EPSS 2.4%CVE-2024-24995HIGHA Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute EPSS 2.4%CVE-2020-24428HIGHAcrobat Reader DC for macOS Race Condition Vulnerability Could Lead to Privilege EscalationEPSS 2.3%CVE-2021-3922HIGHA race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.EPSS 1.9%CVE-2021-3969HIGHA Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation,EPSS 1.9%CVE-2024-39894HIGHOpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObsEPSS 1.6%CVE-2024-7348HIGHPostgreSQL relation replacement during pg_dump executes arbitrary SQLEPSS 1.6%CVE-2025-22224CRITICALVMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious acEPSS 1.6%KEVCVE-2019-5421—Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable`EPSS 1.6%CVE-2011-4126—Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to aEPSS 1.5%CVE-2019-11775—All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loEPSS 1.5%CVE-2020-25860—The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signatuEPSS 1.4%CVE-2026-5947HIGHSIG(0) validation during query flood may lead to undefined behaviorEPSS 1.4%CVE-2022-21658HIGHRace condition in std::fs::remove_dir_all in rustlangEPSS 1.4%CVE-2024-29066HIGHWindows Distributed File System (DFS) Remote Code Execution VulnerabilityEPSS 1.3%CVE-2025-38352HIGHposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()EPSS 1.3%KEVCVE-2023-29337HIGHNuGet Client Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-32093HIGHWindows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityEPSS 1.1%