Vulnerabilities (CVE)

Filtered by CWE-362
Total 2981 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-40130 1 Wp-polls Project 1 Wp-polls 2026-06-17 N/A 4.3 MEDIUM
Auth. (subscriber+) Race Condition vulnerability in WP-Polls plugin <= 2.76.0 on WordPress.
CVE-2022-3623 2 Debian, Linux 2 Debian Linux, Linux Kernel 2026-06-17 N/A 5.0 MEDIUM
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211921 was assigned to this vulnerability.
CVE-2022-3567 1 Linux 1 Linux Kernel 2026-06-17 N/A 4.6 MEDIUM
A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the identifier assigned to this vulnerability.
CVE-2022-3328 1 Canonical 2 Snapd, Ubuntu Linux 2026-06-17 N/A 7.8 HIGH
Race condition in snap-confine's must_mkdir_and_open_with_perms()
CVE-2022-3307 1 Google 1 Chrome 2026-06-17 N/A 8.8 HIGH
Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2022-3071 2 Fedoraproject, Google 4 Fedora, Chrome, Chrome Os and 1 more 2026-06-17 N/A 8.8 HIGH
Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction.
CVE-2022-3049 2 Fedoraproject, Google 4 Fedora, Chrome, Chrome Os and 1 more 2026-06-17 N/A 8.8 HIGH
Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-3042 2 Fedoraproject, Google 3 Fedora, Chrome, Chrome Os 2026-06-17 N/A 8.8 HIGH
Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-39328 1 Grafana 1 Grafana 2026-06-17 N/A 9.8 CRITICAL
Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patched in 9.2.4. There are no known workarounds.
CVE-2022-39134 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 4.7 MEDIUM
In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.
CVE-2022-39006 1 Huawei 3 Emui, Harmonyos, Magic Ui 2026-06-17 N/A 5.9 MEDIUM
The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.
CVE-2022-38047 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 N/A 8.1 HIGH
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-38029 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 N/A 7.0 HIGH
Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-38027 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 N/A 7.0 HIGH
Windows Storage Elevation of Privilege Vulnerability
CVE-2022-38021 1 Microsoft 6 Windows 10, Windows 11, Windows Server 2012 and 3 more 2026-06-17 N/A 7.0 HIGH
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
CVE-2022-38000 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 N/A 8.1 HIGH
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-37035 1 Frrouting 1 Frrouting 2026-06-17 N/A 8.1 HIGH
An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is not needed for exploitation.
CVE-2022-36422 1 Wp-postratings Project 1 Wp-postratings 2026-06-17 N/A 4.3 MEDIUM
Rating increase/decrease via race condition in Lester 'GaMerZ' Chan WP-PostRatings plugin <= 1.89 at WordPress.
CVE-2022-36318 1 Mozilla 3 Firefox, Firefox Esr, Thunderbird 2026-06-17 N/A 5.3 MEDIUM
When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.
CVE-2022-35796 1 Microsoft 1 Edge Chromium 2026-06-17 N/A 7.5 HIGH
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability