CWE-821Incorrect Synchronization

Abstraction: Base · CVEs in our corpus: 14

The product utilizes a shared resource in a concurrent manner, but it does not correctly synchronize access to the resource.

If access to a shared resource is not correctly synchronized, then the resource may not be in a state that is expected by the product. This might lead to unexpected or insecure behaviors, especially if an attacker can influence the shared resource.

Last updated: 21 August 2026 14:15 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SC-4 Information in Shared System Resources
SC-39 Process Isolation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2026-43198`	7.2	9.8	0.0030	2026-05-06
`CVE-2024-1739`	6.9	9.1	0.0056	2024-04-16
`CVE-2022-1931`	6.5	8.1	0.0205	2022-05-31
`CVE-2024-1902`	5.8	7.5	0.0039	2024-04-10
`CVE-2026-77584`	5.2	7.0	0.0018	2026-08-20
`CVE-2026-56132`	5.0	6.9	0.0011	2026-06-19
`CVE-2024-6657`	4.9	6.5	0.0020	2024-10-11
`CVE-2026-21919`	4.9	6.5	0.0023	2026-04-09
`CVE-2023-5088`	4.8	6.4	0.0023	2023-11-03
`CVE-2024-5755`	4.4	5.3	0.0034	2024-06-27
`CVE-2024-4278`	4.1	5.5	0.0023	2024-09-26
`CVE-2024-58131`	3.2	4.0	0.0025	2025-04-06
`CVE-2024-58132`	3.2	4.0	0.0026	2025-04-06
`CVE-2024-58133`	3.2	4.0	0.0026	2025-04-06