CWE-662 Improper Synchronization
Description
The product utilizes multiple threads, processes, components, or systems to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-662 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-xgx4-4h9w-53pv | CVE-2026-47703 | MODERATE |
AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle |
2026-07-20 | |
| GHSA-6447-269v-g68m | - | HIGH |
Mezo: ERC-20 bridgeOut burn can be erased by a stale StateDB overwrite leading to full L1 bridge drain |
2026-05-06 | |
| GHSA-45m3-398w-m2m9 | CVE-2026-28789 | HIGH |
OliveTin has unauthenticated DoS via concurrent map writes in OAuth2 state handling |
2026-03-05 | |
| GHSA-h33q-mhmp-8p67 | CVE-2025-27104 | LOW |
Vyper has a double eval in For List Iter |
2025-04-09 | |
| GHSA-x2w4-c67p-g44j | CVE-2023-2801 | HIGH |
Grafana Missing Synchronization vulnerability |
2025-02-13 | |
| GHSA-h67m-xg8f-fxcf | CVE-2021-41213 | MODERATE |
Deadlock in mutually recursive `tf.function` objects |
2024-11-07 | |
| GHSA-pphf-f93w-gc84 | CVE-2020-36217 | MODERATE | - |
Data race in may_queue |
2024-10-25 |
| GHSA-3fp5-2xwh-fxm6 | CVE-2024-32644 | CRITICAL |
golang/github.com/evmos/evmos/v16
golang/github.com/evmos/evmos/v5
golang/github.com/evmos/evmos/v6
golang/github.com/evmos/evmos/v7
golang/github.com/tharsis/evmos
golang/github.com/tharsis/evmos/v2
golang/github.com/tharsis/evmos/v3
golang/github.com/tharsis/evmos/v4
golang/github.com/tharsis/evmos/v5
|
Evmos transaction execution not accounting for all state transition after interaction with precompiles |
2024-04-19 |
| GHSA-3hj2-hh36-hv9v | CVE-2020-36220 | MODERATE | - |
Data race in va-ts |
2023-06-13 |
| GHSA-hv7x-f3pv-gpwr | CVE-2019-16137 | HIGH | - |
Wrong memory orderings violates mutual exclusion in spin |
2023-06-13 |
| GHSA-9mxw-4856-9cm5 | CVE-2020-36206 | HIGH | - |
Data races in rusb |
2023-06-13 |
| GHSA-jphw-p3m6-pj3c | CVE-2020-36214 | MODERATE | - |
Data races in multiqueue2 |
2023-06-13 |
| GHSA-wr55-mf5c-hhwm | CVE-2020-36209 | HIGH | - |
Data races in late-static |
2023-06-13 |
| GHSA-69vj-xx27-g45w | CVE-2020-36216 | MODERATE | - |
Data race in eventio |
2023-06-13 |
| GHSA-xp6v-qx65-4pp7 | CVE-2020-36211 | HIGH | - |
Data races in gfwx |
2023-06-13 |
| GHSA-rw2c-c256-3r53 | CVE-2020-36215 | HIGH | - |
Data races in hashconsing |
2023-06-13 |
| GHSA-3jc5-5hc5-33gj | CVE-2020-36208 | HIGH | - |
Data races in conquer-once |
2023-06-13 |
| GHSA-vwx4-frpr-w27j | CVE-2022-25210 | LOW |
Improper Synchronization in Jenkins Convertigo Mobile Platform Plugin |
2022-12-01 | |
| GHSA-mm4m-qg48-f7wc | CVE-2020-13759 | HIGH | - |
Improper Synchronization and Race Condition in vm-memory |
2022-06-14 |
| GHSA-q9h2-4xhf-23xx | CVE-2020-36204 | MODERATE | - |
Data races in im |
2022-06-07 |
| GHSA-j42v-6wpm-r847 | CVE-2020-35927 | MODERATE | - |
Data races in thex |
2021-08-19 |
| GHSA-g489-xrw3-3v8w | CVE-2020-36207 | HIGH | - |
Data races in aovec |
2021-08-19 |
| GHSA-8gf5-q9p9-wvmc | CVE-2020-36219 | MODERATE | - |
Data race in atomic-option |
2021-08-19 |
| GHSA-r7rv-2rph-hvhj | CVE-2020-36218 | MODERATE | - |
Improper synchronization in buttplug |
2021-08-19 |