← Security+ glossary

Race condition / TOCTOU TOCTOU

A vulnerability that arises when the state of a resource changes between the moment of the check and the moment of use (time-of-check to time-of-use). The attacker inserts their change into that brief window, for example by swapping a file after the access rights have been checked.

All Security+ guides →