CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Kernel Race Condition and Double Free Vulnerability (CVE-2025-62215) Local Privilege Escalation Advisory
[Affected Scope] Windows operating system kernel components and environments utilizing shared resources
[Impact] An authorized local attacker can trigger a race condition to cause kernel memory corruption, leading to local privilege escalation (LPE) to SYSTEM level
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local access privileges on unpatched systems
Linux Kernel af_alg_sendmsg Race Condition Vulnerability Advisory (CVE-2025-39964)
[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.
[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.
[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.
Linux Kernel POSIX CPU Timers Race Condition Vulnerability (CVE-2025-38352) Technical Advisory
[Affected Scope] Linux kernel deployments where CONFIG_POSIX_CPU_TIMERS_TASK_WORK is disabled or not supported
[Impact] Local attackers can exploit a race condition to trigger a kernel panic (DoS) or potentially achieve Local Privilege Escalation (LPE) via memory corruption
[Mitigation] Apply the official stable kernel patches or ensure CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y is enabled in the kernel configuration
Windows User Profile Service Elevation of Privilege Vulnerability (CVE-2022-26904) Analysis and Mitigation Guide
[Affected Scope] Most Windows operating system versions, including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A locally authenticated attacker can exploit a race condition to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict multi-user interactive logins on unpatched systems
Samsung Mobile MFC Charger Driver Race Condition Vulnerability (CVE-2021-25395) Technical Advisory
[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Security Maintenance Release) MAY-2021 Release 1
[Impact] Local attackers with compromised radio privileges can bypass signature checks via a race condition, leading to arbitrary code execution in the kernel context
[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) immediately and restrict unauthorized application installation
Samsung Mobile MFC Charger Driver Race Condition Use-After-Free (CVE-2021-25394) Technical Analysis and Hardening Guide
[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Samsung Security Maintenance Release) MAY-2021 Release 1.
[Impact] A local attacker with compromised radio privileges can trigger a race condition to perform an arbitrary write in kernel memory, leading to local privilege escalation (LPE).
[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) and restrict unauthorized local application execution.
Apple iOS, iPadOS, and macOS Kernel Race Condition Privilege Escalation Vulnerability (CVE-2021-1782) Analysis and Mitigation Guide
[Affected Scope] Apple devices running iOS versions prior to 14.4, iPadOS prior to 14.4, macOS Big Sur prior to 11.2, watchOS prior to 7.3, and tvOS prior to 14.4
[Impact] A local attacker can execute a malicious application to trigger a race condition in the kernel, leading to full kernel privilege escalation and complete device compromise
[Mitigation] Immediately update all affected Apple operating systems to the latest patched versions (iOS/iPadOS 14.4, macOS Big Sur 11.2, or later)
Mozilla Firefox and Thunderbird ReadableStream Race Condition Use-After-Free Vulnerability (CVE-2020-6820)
[Affected Scope] Firefox < 74.0.1, Firefox ESR < 68.6.1, and Thunderbird < 68.7.0
[Impact] Remote attackers can execute arbitrary code or escape the browser sandbox via a race condition leading to a Use-After-Free (UAF) state, which has been actively exploited in targeted attacks
[Mitigation] Immediately upgrade all installations of Firefox, Firefox ESR, and Thunderbird to the latest patched versions
Mozilla Firefox and Thunderbird nsDocShell Use-After-Free Remote Code Execution Vulnerability (CVE-2020-6819)
[Affected Scope] Firefox < 74.0.1, Firefox ESR < 68.6.1, and Thunderbird < 68.7.0
[Impact] A race condition leading to a Use-After-Free (UAF) allows remote attackers to execute arbitrary code or cause a Denial of Service (DoS) via targeted web-based exploits
[Mitigation] Immediately update all affected Mozilla browser and mail client installations to the latest patched versions
Linux Kernel Copy-on-Write Race Condition Local Privilege Escalation (Dirty COW, CVE-2016-5195)
[Affected Scope] All Linux distributions and Android systems running Linux kernel versions 2.x through 4.x before 4.8.3
[Impact] A local attacker can exploit a race condition to write to read-only memory mappings, gaining root privileges on the target system
[Mitigation] Apply the latest kernel security patches provided by your OS vendor and reboot the system
Linux Kernel n_tty_write Race Condition Local Privilege Escalation (CVE-2014-0196)
[Affected Scope] All Linux systems running Linux kernel versions up to and including 3.14.3
[Impact] Local attackers can exploit a race condition to corrupt kernel memory, leading to a denial of service (system crash) or full root privilege escalation
[Mitigation] Apply the latest kernel security updates provided by your OS vendor and reboot the system