Skip to content
OpenAdvisories

Weakness (CWE)

CWE-820: Missing Synchronization

Base Incomplete

The product utilizes a shared resource in a concurrent manner but does not attempt to synchronize access to the resource.

Source: MITRE CWE-820

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-70637

    LightFTP 2.4 Data Race Condition via ABOR Command in ftpserv.c

    LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers to cause undefined behavior by issuing LIST followed by ABOR commands without authentication. The control thread closes data_socket and file_fd descri…

    hfiref0x LightFTP
  • Medium 5.3
    CVE-2026-57029

    Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash

    A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS). When the reachability of an sFlow collector changes, the …

    Juniper Networks Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2026-44318

    free5GC: BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's BSF PUT /nbsf-management/v1/subscriptions/{subId} handler has an unsynchronized write on the global Subscriptions map. The handler first reads the map under RLock() via…

    free5gc free5gc github.com/free5gc/bsf Go
  • Medium 6.8
    CVE-2025-49751

    Windows Hyper-V Denial of Service Vulnerability

    Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 6.8
    CVE-2025-47999

    Windows Hyper-V Denial of Service Vulnerability

    Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 6.5
    CVE-2024-30387

    Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash

    A Missing Synchronization vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on ACX5448 and ACX710 allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). If an interface flaps while the system gathers st…

    Juniper Networks Junos OS Network devices