Glossary: Vulnerability, Asset and Change Management

TOCTOU (time-of-check to time-of-use)

Also written: TOCTOU, time-of-check to time-of-use

A race condition where a program checks something and the attacker changes it before the program uses it. The fix is to check and use the same object in one step.