Cyber Resilience

CWE · MITRE source

CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition

Abstraction: Base · CVEs in our corpus: 725

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Last updated: 11 August 2026 21:18 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 1 framework(s): CAPEC 2 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • AU-8 Time Stamps
  • PR.PS-06
  • AC-3 Access Enforcement
  • AC-25 Reference Monitor
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)
  • V15.4.2
  • V17.2.6

NIST 800-53 r5 controls that address this weakness (1)AI-assisted

Control Title Family Why it addresses this CWE
AU-8Time StampsAUTimestamps meeting UTC or offset standards help identify TOCTOU issues through precise chronological reconstruction of check/use operations.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2023-35311 KEV 9.28.80.15522023-07-11
CVE-2024-50379 9.29.80.44312024-12-17
CVE-2025-22224 KEV 9.29.30.01562025-03-04
CVE-2022-36980 8.78.10.83142023-03-29
CVE-2025-38352 KEV 8.57.80.01282025-07-22
CVE-2023-38146 8.38.80.39492023-09-12
CVE-2024-01328.19.00.37752024-09-26
CVE-2024-56337 8.19.80.09032024-12-20
CVE-2022-48618 KEV 7.97.00.00492024-01-09
CVE-2024-30088 KEV 7.97.00.68202024-06-11
CVE-2021-32708 7.89.80.03492021-06-24
CVE-2019-7249 7.79.80.02512019-01-31
CVE-2019-5421 7.69.80.01562019-04-03
CVE-2024-28718 7.59.80.01062024-04-12
CVE-2024-41787 7.59.80.01112025-01-10
CVE-2024-41779 7.49.80.00842024-11-22
CVE-2026-25641 7.410.00.00492026-02-06
CVE-2026-37531 7.49.80.00712026-05-01
CVE-2024-27114 7.39.80.00542024-09-11
CVE-2025-64180 7.310.00.00312025-11-07
CVE-2026-64091 7.39.80.00552026-07-19
CVE-2026-44112 7.29.60.02442026-05-06
CVE-2024-43452 7.17.50.24322024-11-12
CVE-2026-538387.19.80.00232026-06-12
CVE-2004-0594 7.00.00.54862004-07-27