CVE & Security Advisory Radar

Tier	CVEs	Anteil
≥90 %	784	0,2 %
≥50 %	3.558	0,9 %
≥10 %	13.141	3,2 %
<10 %	395.489	95,8 %

Tier

CVEs

Anteil

≥90 %

784

0,2 %

≥50 %

3.558

0,9 %

≥10 %

13.141

3,2 %

<10 %

395.489

95,8 %

7.0 HIGH

EPSS

4.5%

CVE-2025-62215 💻 Lokal 🔑 Geringe Nutzerrechte nötig

Microsoft

CVE-2025-62215 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CWE-362 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Patch-Tuesday Update einspielen oder betroffene Dienste in Windows Defender isolieren.

vor 11 Monaten ↻ vor 8 Monaten

🛡️ Details ➔

7.8 HIGH

EPSS

1.6%

CVE-2025-39964 💻 Lokal 🔑 Geringe Nutzerrechte nötig

Linux

CVE-2025-39964 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fa

CWE-362 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

vor 1 Jahr ↻ vor 23 Tagen

🛡️ Details ➔

7.5 HIGH

EPSS

99.4%

CVE-2023-36884 🌐 Netzwerk (Remote) 🔓 Keine Authentifizierung nötig

Microsoft

CVE-2023-36884 | Windows Search Remote Code Execution Vulnerability

Windows Search Remote Code Execution Vulnerability

CWE-362 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Patch-Tuesday Update einspielen oder betroffene Dienste in Windows Defender isolieren.

vor 3 Jahren ↻ vor 2 Monaten

🛡️ Details ➔

7.0 HIGH

EPSS

17%

CVE-2022-26904 💻 Lokal 🔑 Geringe Nutzerrechte nötig

Microsoft

CVE-2022-26904 | Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

CWE-362 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Patch-Tuesday Update einspielen oder betroffene Dienste in Windows Defender isolieren.

vor 4 Jahren ↻ vor 1 Jahr

🛡️ Details ➔

6.4 MEDIUM

EPSS

0.4%

CVE-2021-25395 💻 Lokal 🔐 Admin-Rechte nötig

Samsung Mobile

CVE-2021-25395 | A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

CWE-362 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

vor 5 Jahren ↻ vor 1 Jahr

🛡️ Details ➔

8.8 HIGH

EPSS

24%

CVE-2021-21166 🌐 Netzwerk (Remote) 🔓 Keine Authentifizierung nötig

Google

CVE-2021-21166 | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-362 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

vor 5 Jahren ↻ vor 1 Jahr

🛡️ Details ➔

8.1 HIGH

EPSS

7.1%

CVE-2020-6820 🌐 Netzwerk (Remote) 🔓 Keine Authentifizierung nötig

Mozilla

CVE-2020-6820 | Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Fi

CWE-362 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

vor 6 Jahren ↻ vor 1 Jahr

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub

CVE-2025-62215 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2023-36884 | Windows Search Remote Code Execution Vulnerability

CVE-2022-26904 | Windows User Profile Service Elevation of Privilege Vulnerability

CVE-2021-25395 | A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

CVE-2021-21166 | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-6820 | Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.