CWE-362


Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

We have discovered 32,006 live websites that are affected by CWE-362.

Contact us to get more info







CVEs

  • Count - 19



Website Distribution by Country

Number of websites using CWE-362
United States10,715 websites


Germany2,203 websites
China1,620 websites
France1,617 websites
Russia1,194 websites
Vietnam1,056 websites
GB1,047 websites
Brazil781 websites
Spain737 websites
Poland733 websites

Website Distribution by TLD

Number of websites using CWE-362
.com13,160 websites
.org1,415 websites
.de1,208 websites
.ru1,045 websites
.net977 websites
.fr723 websites
.com.br617 websites
.co.uk599 websites
.it585 websites
.nl548 websites

Newest CVEs

List of the most recent CVEs that are part of CWE-362
DiscoveredCVEDescriptionWebsites
May, 2026CVE-2026-46727 An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the ...1
May, 2026CVE-2026-4635 Persistent notification timing attack causing server denial of service118
Mar, 2026CVE-2026-25674 Potential incorrect permissions on newly created file system objects6
Feb, 2026CVE-2026-24040 jsPDF has a Shared State Race Condition in addJS Plugin6,712
Dec, 2025CVE-2025-13231 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition1,351
Sep, 2025CVE-2025-59052 Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage5,843
Aug, 2025CVE-2025-7954 Race Condition in Shopware Voucher Submission2
Jul, 2025CVE-2025-52434 Apache Tomcat: APR/Native Connector crash leading to DoS6,015
May, 2025CVE-2025-32421 Next.js Race Condition to Cache Poisoning467
Mar, 2025CVE-2025-24808 Discourse has race condition when adding users to a group DM919

The most widespread CVEs

List of the most common CVEs that are part of CWE-362
DiscoveredCVEDescriptionWebsites
Feb, 2026CVE-2026-24040 jsPDF has a Shared State Race Condition in addJS Plugin6,712
Jul, 2025CVE-2025-52434 Apache Tomcat: APR/Native Connector crash leading to DoS6,015
Sep, 2025CVE-2025-59052 Angular SSR: Global Platform Injector Race Condition Leads to Cross-Request Data Leakage5,843
Nov, 2023CVE-2023-4642 kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition4,460
Jul, 2023CVE-2023-2010 Forminator < 1.24.1 - Unauthenticated Race Condition on poll vote4,034
Dec, 2025CVE-2025-13231 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition1,351
Nov, 2023CVE-2023-6109 YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation1,054
Jun, 2021CVE-2021-24377 Autoptimize < 2.7.8 - Race Condition leading to RCE963
Sep, 2022CVE-2021-43980 Apache Tomcat: Information disclosure954
Mar, 2025CVE-2025-24808 Discourse has race condition when adding users to a group DM919

Websites affected by CWE-362

Top websites that are affected by CWE-362. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
************.com United States*,***
*************.net United States*,***
********.com United States*,***
***.fr France*,***
****.com United States*,***
*****.com United States*,***
******.**.jp Japan*,***
******************.info United States*,***
**********.com United States*,***
************.com United States*,***
See full domain list