CVE-2026-92694 is a race condition vulnerability in FastNetMon version 1.2.9 and earlier. The flaw occurs in the IPv6 top-talkers screen-draw thread, which iterates over a map without proper mutex locking while another function modifies the same map. This can cause undefined behavior under load, potentially leading to process instability. No fixed version is currently available.
The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 2.0.0 until 2.3.0 in @modelcontextprotocol/server, applications that shared one stateless HTTP transport or one McpServer or Server instance among multiple clients could deliver responses and notifications to the wrong client. The affected surface is an MCP server reached over HTTP by multiple clients. The trigger is reuse of one stateless transport or server instance. Messages were associated with a connection using only the JSON-RPC request identifier. SDK clients start request identifiers at zero, so collisions occur in normal operation. Cross-client delivery exposes one client's responses and notifications to another client. The issue requires an HTTP endpoint reachable by more than one client and an application that constructs the server or transport once at startup instead of once per request or session. stdio servers and factory-created per-call servers are not affected. Upgrading causes reused instances to fail and therefore requires an application code change. This issue is fixed in @modelcontextprotocol/server 2.3.0.
A race condition vulnerability exists in YITH WooCommerce Gift Cards WordPress plugin versions before 4.38.1. The plugin does not properly lock or atomically update gift card balances during redemption at checkout. This flaw allows an attacker who possesses a gift card code to spend more than the card's funded value by submitting multiple simultaneous checkouts using the same code.
VoiceSentinel versions from 2.2.1 up to but not including 3.3.1 have a race condition in the optional report buffer feature. This race occurs between retention cleanup and transcript writes, leading to possible loss, duplication, or corruption of transcript data. The issue can also cause unbounded disk growth, potentially exhausting storage and crashing the host or other services. The feature is disabled by default and must be enabled to be affected. The vulnerability is fixed in version 3.3.1.
A race condition vulnerability in OpenVPN ovpn-dco-win versions 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service by crashing the system during the TCP connection process.
@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a session before a logout could save its own copy after another request had completed the session destroy call, recreating the destroyed session identifier with its authenticated data. An attacker who already holds a victim's valid signed session cookie and keeps a request in flight across the logout can replay that cookie to restore the session after it was meant to be revoked, without any cookie theft or signature forgery. The issue is fixed in @fastify/session 11.1.6, which adds a per session generation marker and a conditional store write so a session restored before a logout or regeneration cannot recreate or overwrite the current entry, and users should upgrade to 11.1.6 or later. There is no workaround, and custom session stores must implement the new conditional write.
A race condition in Tokio 1.54.0's time interval polling can cause use-after-free issues leading to assertion panics, task reference-count corruption, or heap memory corruption. This flaw is fixed in version 1.54.1.
CVE-2026-94300 is a high-severity vulnerability in ISC BIND 9 that involves a double free memory corruption triggered by replaying GSS-TSIG signed UDP messages. An attacker capable of capturing a previously signed UDP message can replay it while the TSIG key remains valid. By sending crafted queries to a zone controlled by the attacker, remote code execution may be possible. This affects multiple BIND 9 versions including 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, and 9.21.0 through 9.21.26, including certain S1 variants.
CVE-2026-82942 is a race condition vulnerability in Apache bRPC versions prior to 1.18.0 when RDMA support is enabled. It allows a remote unauthenticated client to cause a denial of service by crashing the server process. The issue arises from unsynchronized access to shared input buffers during RDMA handshake and message processing. This affects deployments using RDMA-enabled bRPC servers accepting untrusted clients. The vulnerability is fixed in version 1.18.0.
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Camel PQC component.
This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1.
The producer held a single java.security.Signature instance and used it for every exchange without synchronizing access. Signature is stateful and is not thread safe: update() accumulates the data to be signed or verified, and verify() consumes that accumulated state. With concurrent exchanges sharing one instance the update and verify calls of different messages interleave, so a verification can complete against data that belongs to another exchange, or against a partially accumulated buffer. The outcome is non-deterministic and includes a verification reporting success for a message whose signature was never actually checked, which defeats the guarantee the component exists to provide. Reaching it requires concurrent traffic through the same endpoint, which is the ordinary condition for a Camel route under load.
Upgrade to Apache Camel 4.23.0, which fixes the issue. Users on the 4.18.x LTS releases stream should upgrade to 4.18.5. Users on the 4.22.x LTS releases stream should upgrade to 4.22.1. The Signature instance is no longer shared across concurrent exchanges. For deployments that cannot upgrade immediately, restrict the affected route to a single concurrent consumer so that no two exchanges use the instance at once.
CVE-2026-58100 is a race condition vulnerability in FreeBSD's kqueue_fork_copy_knote() function. It occurs because the function indexes the child's file descriptor table using a knote's file descriptor number without performing bounds checking. This can lead to an out-of-bounds read if a concurrent thread in the parent process grows the parent's file descriptor table and registers knotes with file descriptor numbers beyond the child's table size. An unprivileged local user may exploit this race condition to escalate privileges.
CVE-2026-58099 is a race condition vulnerability in FreeBSD affecting the copying of knotes from a parent kqueue to a child. The flaw arises because marker knotes, which track list traversal positions internally, were not properly excluded before being marked as in-flux and releasing the kqueue lock. This can lead to use-after-free conditions if another thread frees a marker while the lock is dropped. An unprivileged local user could exploit this to escalate privileges on the system.
A race condition vulnerability in Nezha Monitoring versions 2.2.7 through 2.2.10 allows a RoleMember to cause a nil pointer dereference in the ServiceSentinel worker. This leads to a panic that terminates the dashboard process, disrupting the web interface, REST API, and agent connections for all tenants. The issue affects availability only and does not expose or modify data. Fixed in version 2.2.11 and later.
CVE-2026-103568 is a race condition vulnerability in Windows Credential Providers affecting multiple versions of Microsoft Windows 10, including version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges due to improper synchronization when accessing shared resources. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official fixes have been released for all affected versions.
CVE-2026-102211 is a use-after-free vulnerability in the Windows Virtualization-Based Security (VBS) Enclave component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed by Microsoft in specific Windows 10 builds.
CVE-2026-102207 is a race condition vulnerability in the Windows Kernel of Microsoft Windows 10 Version 1607 and related builds. It allows a locally authorized attacker to elevate privileges by exploiting improper synchronization during concurrent execution using a shared resource. The vulnerability has been assigned a high severity with a CVSS score of 7. An official fix is available in multiple updated Windows 10 builds.
CVE-2026-97787 is a race condition vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys) affecting Microsoft Windows 11 version 23H2. This flaw allows a locally authorized attacker to elevate privileges by exploiting improper synchronization during concurrent execution using a shared resource. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 11 builds.
CVE-2026-96949 is a race condition vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including version 1607. This use-after-free flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.