CVE Watch20 oct 2026

CVE-2026-88160

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an

CVSS

7.0

Alto

EPSS

0.2%

KEV

—

Exploit Today

0-100

Publicado: 13 oct 2026 · Última mod.: 20 oct 2026 · CWE-362

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-10-142026-10-21

Descripción técnica

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88160

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1137075.4 MED

16.5%

——5A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file a2a-server/src/task_store/inmemory.rs. The manipulation results in race condition. The attack may be performed from remote. The patch is identified as 7050c7d329238539424ee46440e23b91c4825bee. It is advisable to implement a patch to correct this issue.2d CVE-2026-1013569.1 CRÍ

43.1%

——13Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.22 through 11.0.26, from 10.1.55 through 10.1.60, from 9.0.118 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fixes the issue.2d CVE-2026-869617.8 ALT

0.1%

——0A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.1d CVE-2026-869154.7 MED

0.0%

——0A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.2d CVE-2026-653724.7 MED

1.8%

——1A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.2d CVE-2026-191786.8 MED

8.1%

——2IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.2d