CVE-2025-47332
Memory corruption while processing a config call from userspace.
CVSS
6.7
Média
EPSS
0.1%
p0
KEV
—
Exploit Today
0
0-100
Publicado: 7 de jan. de 2026 · Última mod.: 7 de out. de 2026 · CWE-367
0.1%EPSS · 30 dias0.1%
2026-10-142026-11-11
Memory corruption while processing a config call from userspace.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1269353.7 BAI—
———Zipline before 4.8.0 contains a race condition vulnerability in src/server/routes/raw/[id].ts that allows remote attackers to bypass file maxViews limits through non-atomic view counting. Attackers holding a file link can send parallel requests that read the same pre-increment count, viewing view-limited or delete-on-max-views files beyond their limit.2hCVE-2026-126906——
———Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via crafted network traffic. (Chromium security severity: High)2hCVE-2026-1115217.0 ALT—
———Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-of-use (TOCTOU) Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.3hCVE-2025-54506—2.8%
——1A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity.1dCVE-2026-500793.3 BAI0.2%
——0Time-of-check Time-of-use (TOCTOU) Race Condition in the virtio network virtual device could allow an attacker in the guest to manipulate the virtual network device causing a crash of the QVM.1dCVE-2026-882167.5 ALT41.2%
——12Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.1d