CVE-2026-83871 is a heap-based buffer overflow vulnerability in OpenSSH for Windows on Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.0 and affects multiple Windows 10 versions prior to specific fixed builds. An official fix is available from Microsoft.
CVE-2026-83839 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Hyper-V on Microsoft Windows 10 Version 1809 and later builds. This flaw allows a locally authorized attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7. An official fix is available in multiple updated Windows 10 versions.
CVE-2026-83834 is a use-after-free vulnerability in Windows Kernel-Mode Drivers affecting multiple builds of Microsoft Windows 10 Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7. An official fix is available in specific updated Windows 10 builds.
CVE-2026-83510 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Windows Setup Files Cleanup component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows a locally authorized attacker to elevate privileges. The vulnerability affects multiple Windows 10 builds and has been assigned a high severity score. Official fixes have been released for all affected versions.
CVE-2026-83504 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows SmartScreen on Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to disclose sensitive information. The vulnerability affects multiple builds of Windows 11 23H2 prior to specific fixed versions. A patch is officially available to address this issue.
CVE-2026-108361 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in Privasys ra-tls-clients before version 0.9.1. The vulnerability allows a local attacker to modify workload code, data, and configuration on the TLS endpoint after the connection is established but before it is terminated. This occurs because attestation is only performed once at connection establishment, and the verifying peer assumes the attested state remains unchanged during the connection lifetime. This flaw is fixed in version 0.9.1.
CVE-2026-73179 is a high-severity race condition vulnerability in Apache CXF's JPA OAuth2 authorization code grant provider. It allows a remote attacker to obtain multiple valid access tokens from a single authorization code by exploiting a time-of-check to time-of-use (TOCTOU) flaw in the non-atomic find-then-delete operation under READ_COMMITTED isolation. This issue is fixed in Apache CXF versions 4.2.4, 4.1.9, and 3.6.13.
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use (TOCTOU) gap allowed an attacker who could write to the workspace to atomically replace a project file with a symlink, causing Claude Code to follow the symlink and write its output to an arbitrary file outside the project sandbox. Exploitation required the ability to win a race condition against the write operation and write access to the shared workspace, enabling a lower-privileged attacker to redirect benign edits to sensitive files (e.g., shell configuration) in a higher-privileged session.
Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to the latest version.
Thank you to hackerone.com/c_h4ck_0 for reporting this issue.
yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without exclusive creation, allowing another local user with access to the same shared temporary directory to create or replace the library file before System.load() uses it. Successful exploitation depends on shared-directory permissions, host protections, and winning the race, and can execute native code as the victim; hardened systems may instead cause library loading to fail and fall back to Java implementations. Configurations using a system library, a private java.io.tmpdir, or Java-only implementations are not affected. This issue is fixed in version 1.11.4.
CVE-2026-93315 is a medium severity vulnerability in moby BuildKit affecting versions from 0.31.0 up to but not including 0.33.1. It involves a time-of-check to time-of-use (TOCTOU) race condition when proxy networking with CA injection is enabled. This flaw allows a build process to modify its CA bundle before cleanup, potentially causing the cleanup operation to block, execute outside the intended build root filesystem, or fail without failing the build itself.
CVE-2026-105743 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the docling-project's docling software. Versions from 2.91.0 up to but not including 2.132.0 are affected. The issue arises because the validate_url_safety function performs a single IPv4 lookup to validate a hostname but then allows the HTTP client to resolve and parse the original URL again, enabling DNS rebinding and mixed public/internal address records to bypass validation. Additionally, HTMLBackendOptions(render_page=True) permits HTTP and HTTPS requests without validating the resolved destination. Exploitation requires remote fetching to be enabled, and the response content is only exposed when decoded as an image or rendered passively in a page screenshot. The vulnerability is fixed in version 2.132.0.
A time-of-check to time-of-use (TOCTOU) race condition vulnerability in TryGhost Ghost versions 6.54.1 through 6.64.0 allows unauthenticated users to abuse certain functionality, such as Webmentions, to make limited HTTP requests to hosts within the Ghost server's internal network. The attack does not return response data. The issue is fixed in version 6.65.0.
A time-of-check to time-of-use (TOCTOU) race condition exists in Progress Telerik Fiddler Classic for Windows versions prior to 6.0.20262.10021. This vulnerability occurs during the installation of the HTTPS interception root certificate, where a temporary file is written in a user-writable location and then imported by an elevated helper application. A local low-privilege attacker can replace this temporary file before it is read by the elevated process, causing an attacker-controlled root certificate to be installed in the Local Computer Trusted Root Certification Authorities store. Exploitation requires user initiation and approval of an elevation prompt.
CVE-2026-47497 is a high-severity vulnerability in NVIDIA Virtual GPU Manager's GPU System Processor tracing component. It involves a time-of-check to time-of-use (TOCTOU) race condition that allows a guest VM user to send crafted data through a shared buffer, potentially leading to unauthorized code execution, privilege escalation, data tampering, denial of service, and information disclosure.
CVE-2026-92369 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the TeamViewer Full Client and Host installer rollback mechanism on Windows. It affects versions prior to 15.82. A local low-privileged attacker can exploit this race condition by replacing rollback backup files in a user-writable temporary directory before they are restored by an elevated installer, potentially escalating privileges to NT AUTHORITY/SYSTEM. Exploitation requires precise timing during installation or update rollback.
A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation. This could enable local attackers to execute arbitrary code with elevated privileges.
CVE-2026-77242 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in sooperset's mcp-atlassian server prior to version 0.22.0. The flaw arises because the hostname validation function validate_url_for_ssrf resolves DNS addresses separately from the actual connection attempt, allowing an attacker to exploit short-lived DNS responses to bypass SSRF protections. This can lead to unauthorized access to internal or metadata endpoints. The issue is fixed in version 0.22.0.
A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DT_RPATH for setuid/setgid (AT_SECURE) programs, glibc validates the lexically normalized search path against the trusted directories but then opens the raw, un-normalized path. On systems where the Linux fs.protected_hardlinks sysctl is disabled, a local attacker who hard-links such a program into an attacker-controlled directory and wins a race to replace an intermediate path component with a symbolic link can direct the loader outside the trusted directory, causing it to load an attacker-controlled shared object and execute arbitrary code with the elevated privileges of the program.
Exploitation requires an installed setuid or setgid binary whose DT_RPATH uses $ORIGIN followed by ".." traversal that normalizes into a trusted directory, and the ability to hard-link that binary and win the race by swapping a path component for a symbolic link. Major Linux-based OS distributions ship with fs.protected_hardlinks enabled by default and mitigate the vulnerability.
draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, deployments with ENABLE_DRAWIO_PROXY=1 are vulnerable to server-side request forgery because src/main/java/com/mxgraph/online/Utils.java performs the private-address check in Utils.sanitizeUrl() using one DNS resolution, while src/main/java/com/mxgraph/online/ProxyServlet.java later calls URL.openConnection() and performs a second resolution. An attacker-controlled hostname can resolve to a public address during validation and then to a private, link-local, or cloud metadata address when the connection is opened. Successful exploitation can return cloud instance metadata or responses from internal HTTP services through the proxy. This issue is fixed in version 30.2.7.