CWE-662: Improper Synchronization
The product utilizes multiple threads, processes, components, or systems to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.
7 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2024-32644 — Evmos' transaction execution not accounting for all state transition after interaction with precompiles
- CVE-2026-28789 — OliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handling
- CVE-2026-39865 — Axios HTTP/2 Session Cleanup State Corruption Vulnerability
- CVE-2025-27104 — double eval in For List Iter in Vyper
- CVE-2025-22853 — Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalat
- CVE-2026-13489 — 78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization
Recently published
- CVE-2026-13489 — 78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization
- CVE-2026-39865 — Axios HTTP/2 Session Cleanup State Corruption Vulnerability
- CVE-2026-28789 — OliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handling
- CVE-2025-22853 — Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalat
- CVE-2025-27104 — double eval in For List Iter in Vyper
- CVE-2024-32644 — Evmos' transaction execution not accounting for all state transition after interaction with precompiles
More specific weaknesses
- CWE-1058 — Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element
- CWE-1265 — Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls
- CWE-362 — Race Condition
- CWE-663 — Use of a Non-reentrant Function in a Concurrent Context
- CWE-667 — Improper Locking
- CWE-820 — Missing Synchronization
- CWE-821 — Incorrect Synchronization