CWE-362 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-362 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2023-36884Windows Search Remote Code Execution Vulnerability99.4%높음7.5● 실제 악용이 확인됨CVE-2016-5195Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to ga…83.5%높음7.0● 실제 악용이 확인됨CVE-2021-21166Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially e…24.0%높음8.8● 실제 악용이 확인됨CVE-2014-0196The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly…20.3%보통5.5● 실제 악용이 확인됨CVE-2022-26904Windows User Profile Service Elevation of Privilege Vulnerability16.9%높음7.0● 실제 악용이 확인됨CVE-2020-6820Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-fre…7.1%높음8.1● 실제 악용이 확인됨CVE-2025-62215Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…4.5%높음7.0● 실제 악용이 확인됨CVE-2020-6819Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-a…3.0%높음8.1
전체 목록
120건
CVE-2025-39964악용 확인In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent write…1.6%보통5.5
CVE-2021-0920악용 확인In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could le…0.9%보통6.4
CVE-2021-25394악용 확인A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows…0.4%보통6.4
CVE-2021-25395악용 확인A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signat…0.4%보통6.4
CVE-2026-94300Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can captu…1.0%높음8.1
CVE-2026-104714Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in A…0.7%높음8.8
CVE-2026-70091Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS all…0.7%보통5.9
CVE-2026-94043A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /co…0.6%보통5.5
CVE-2026-69782Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allo…0.6%높음8.1
CVE-2026-69827Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allo…0.5%높음8.1
CVE-2026-101356Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchrono…0.5%심각9.1
CVE-2026-69364Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print S…0.5%높음7.1
CVE-2026-70183Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core al…0.5%높음7.5
CVE-2026-100394Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 unt…0.4%보통6.5
CVE-2026-61628nginx ignition is a user interface for the nginx web server. Prior to version 2.41.1, `POST /api/users/onboard…0.4%높음8.1
CVE-2026-88174Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deploym…0.4%높음8.1
CVE-2026-70250Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network…0.4%높음8.8
CVE-2026-112556A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macO…0.4%보통4.8
CVE-2026-118128A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyS…0.4%보통6.9
CVE-2026-53715Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based applicati…0.4%보통5.3
CVE-2026-85248Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in A…0.4%보통5.9
CVE-2026-77633Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanag…0.4%높음7.1
CVE-2026-117507A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function…0.3%보통5.3
CVE-2026-77762Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in A…0.4%높음8.1
CVE-2026-69830Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Se…0.4%높음8.1
CVE-2026-106500Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @ba…0.3%높음8.5
CVE-2026-105163A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects th…0.3%보통6.9
CVE-2026-71537Paymenter is a free and open-source webshop solution for management of hosting services. Prior to 1.5.7, app/L…0.3%보통6.5
CVE-2026-91947FreeRDP server versions before 3.31.0 contain a use-after-free vulnerability in the DRDYNVC parser that derefe…0.3%높음7.7
CVE-2026-87816PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement …0.3%높음8.7
CVE-2026-84230IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race c…0.3%높음7.5
CVE-2026-106238Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised …0.3%높음8.3
CVE-2026-85704A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35…0.3%낮음2.9
CVE-2026-50013Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode…0.3%높음7.5
CVE-2026-106201Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary co…0.3%높음8.8
CVE-2026-95280Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary co…0.3%높음7.5
CVE-2026-104855Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks i…0.3%낮음2.0
CVE-2026-59045In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local…0.3%높음7.4
CVE-2026-113707A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InM…0.3%보통5.3
CVE-2026-114641Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate)…0.3%보통6.3
CVE-2026-104970Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/ap…0.3%높음8.1
CVE-2026-104057Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access…0.3%높음8.7
CVE-2026-106377Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised …0.3%높음8.3
CVE-2026-65415A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS …0.2%높음8.1
CVE-2026-109407A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown pro…0.3%낮음2.3
CVE-2026-61854VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the option…0.2%높음8.2
CVE-2026-90506A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This…0.2%낮음1.3
CVE-2026-90505A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affe…0.2%낮음1.3
CVE-2026-85333Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Perform…0.2%보통6.7
CVE-2026-116403Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in A…0.2%보통5.9
CVE-2026-106255Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute …0.2%높음8.8
CVE-2026-86766Snipe-IT versions up to and including 8.6.3 contain a race condition (TOCTOU) in the consumable checkout API e…0.2%높음7.1
CVE-2026-116121A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing of the fi…0.2%보통6.3
CVE-2026-55318In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote c…0.2%높음8.8
CVE-2026-7208Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that …0.2%보통6.0
CVE-2026-106426Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execu…0.2%높음8.3
CVE-2026-70195Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose info…0.2%보통4.7
CVE-2026-109945FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOC…0.2%보통6.0
CVE-2026-85639A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the…0.2%낮음2.9
CVE-2026-79625Affected products do not properly synchronize access to their monitoring functionality. When multiple clients …0.2%높음7.2
CVE-2026-82416FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP sess…0.2%높음7.7
CVE-2026-101041The account recovery (password reset) functionality in the vulnerability-lookup web application contains a tim…0.2%보통6.3
CVE-2026-95384Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to p…0.2%보통5.3
CVE-2026-70582Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Managem…0.2%보통6.4
CVE-2026-84014Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate priv…0.2%높음7.0
CVE-2026-83738Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privi…0.2%높음7.0
CVE-2026-100805Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 a…0.2%높음7.5
CVE-2026-109954Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concu…0.2%높음8.3
CVE-2026-71347Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Securit…0.2%보통6.4
CVE-2026-69385Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP …0.2%높음7.0
CVE-2026-83899Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally…0.2%높음7.0
CVE-2026-81971Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS al…0.2%높음7.0
CVE-2026-107276MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests c…0.2%보통6.3
CVE-2026-111449Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by def…0.2%보통5.9
CVE-2026-86744Snipe-IT 8.6.3 and earlier (and develop pre-release commits prior to the fix) contain a race condition in the …0.2%낮음2.1
CVE-2026-111404Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in V…0.2%낮음3.7
CVE-2026-116476A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the func…0.2%보통5.3
CVE-2026-69792Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K …0.2%보통4.7
CVE-2026-97787Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Contain…0.2%높음7.0
CVE-2026-83879Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay…0.2%높음7.0
CVE-2026-83775Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Install…0.2%높음7.0
CVE-2026-69931Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage…0.2%높음7.0
CVE-2026-69766Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69736Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credent…0.2%높음7.0
CVE-2026-69935Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69856Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69763Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-73463On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are …0.2%보통6.0
CVE-2026-106213Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially le…0.2%보통4.3
CVE-2026-85941Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Install…0.2%높음7.0
CVE-2026-82390The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session cipher API — it hands ou…0.2%낮음3.7
CVE-2026-70097Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtual…0.2%보통5.6
CVE-2026-85892Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge …0.2%높음7.8
CVE-2026-69710Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello a…0.2%높음7.5
CVE-2026-50349Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancilla…0.2%높음7.0
CVE-2026-69404Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP …0.2%높음7.0
CVE-2026-69398Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetoo…0.2%높음7.0
CVE-2026-85329Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Accou…0.2%높음7.0
CVE-2026-83722Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate …0.2%높음7.0
CVE-2026-83666Concurrent execution using shared resource with improper synchronization ('race condition') in Active Director…0.2%높음7.0
CVE-2026-69581Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges local…0.2%높음7.0
CVE-2026-73005Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.0.2%높음7.0
CVE-2026-69448Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetoo…0.2%높음7.0
CVE-2026-69441Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Install…0.2%높음7.0
CVE-2026-69319Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Vid…0.2%높음7.0
CVE-2026-102211Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate…0.2%높음7.0
CVE-2026-103651MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consu…0.2%높음7.6
CVE-2026-85825Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.2%높음7.0
CVE-2026-96932Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedde…0.2%높음7.0
CVE-2026-88146Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backgro…0.2%높음7.0
CVE-2026-85824Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges loca…0.2%높음7.0
CVE-2026-96949Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to ele…0.2%높음7.0
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.