PULSE
ES
FEED
ransomhelix reclama a Westrock Coffee · US · Retail & E-Commerceransomakira reclama a Flextron Circuit Assembly · SG · Manufacturingransomakira reclama a Cascade Flooring America · US · Retail & E-Commerceransomhelix reclama a Hypertherm · US · Manufacturingransomeverest reclama a PLD Group · Otherransomeverest reclama a Lindauer Dornier · DE · Manufacturingransomeverest reclama a Lanham Associates · Professional Servicesransompear reclama a Adobe Insurance Brokers, LLC · US · Financial Servicesransomhyflock reclama a gabonmeca.com leak incident · GA · Manufacturingransomhyflock reclama a dangvuongcac · VN · Not Foundransomn0n reclama a Company #103 · PT · Not Foundransomn0n reclama a Company #102 · Not Foundransomn0n reclama a Company #101 · Not Foundransomn0n reclama a Company #100 · Not Foundransomhelix reclama a Westrock Coffee · US · Retail & E-Commerceransomakira reclama a Flextron Circuit Assembly · SG · Manufacturingransomakira reclama a Cascade Flooring America · US · Retail & E-Commerceransomhelix reclama a Hypertherm · US · Manufacturingransomeverest reclama a PLD Group · Otherransomeverest reclama a Lindauer Dornier · DE · Manufacturingransomeverest reclama a Lanham Associates · Professional Servicesransompear reclama a Adobe Insurance Brokers, LLC · US · Financial Servicesransomhyflock reclama a gabonmeca.com leak incident · GA · Manufacturingransomhyflock reclama a dangvuongcac · VN · Not Foundransomn0n reclama a Company #103 · PT · Not Foundransomn0n reclama a Company #102 · Not Foundransomn0n reclama a Company #101 · Not Foundransomn0n reclama a Company #100 · Not Found
← All CVEs
CVE WatchOct 7, 2026

CVE-2025-66321

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect a

CVSS

5.1

Medium

EPSS

0.1%

p0

KEV

—

Exploit Today

0

0-100

Published: Dec 8, 2025 · Last modified: Oct 7, 2026 · CWE-362

EPSS · 30d
0.1%EPSS · 30 days0.1%
2026-09-222026-10-20
Technical description

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1137075.4 MED
—
——0A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file a2a-server/src/task_store/inmemory.rs. The manipulation results in race condition. The attack may be performed from remote. The patch is identified as 7050c7d329238539424ee46440e23b91c4825bee. It is advisable to implement a patch to correct this issue.23hCVE-2026-1013569.1 CRI
—
——0Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.22 through 11.0.26, from 10.1.55 through 10.1.60, from 9.0.118 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fixes the issue.1dCVE-2026-869617.8 HIG
3.1%
——1A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.19hCVE-2026-869154.7 MED
2.7%
——1A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.1dCVE-2026-653724.7 MED
10.3%
——3A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.1dCVE-2026-191786.8 MED
8.1%
——2IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.1d