CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Description

The software checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the software to perform invalid actions when the resource is in an unexpected state.

Latest vulnerabilities for CWE-367

Multiple vulnerabilities in AMD EPYC processors 2024-10-02
Medium Yes

Multiple vulnerabilities in NVIDIA Container Toolkit and GPU Operator 2024-10-01
Medium Yes

Multiple vulnerabilities in IBM Storage Protect Plus 2024-09-24
High Yes

Multiple vulnerabilities in Moxa MXview One and MXview One Central Manager Series 2024-09-23
Medium Yes

Multiple vulnerabilities in Dell PowerFlex Appliance 2024-08-21
High Yes

Multiple vulnerabilities in Microsoft Windows Kernel 2024-08-13
Low Yes

Multiple vulnerabilities in Microsoft Windows Kernel-Mode Driver 2024-08-13
Low Yes

Privilege escalation in PostgreSQL 2024-08-08
Low Yes

Multiple vulnerabilities in IBM Storage Ceph 2024-08-08
Low Yes

Multiple vulnerabilities in Dell ObjectScale 2024-08-08
High Yes

References

Description of CWE-367 on Mitre website