CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- delta electronics drasimucadDelta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- tcpdf project tcpdfTCPDF has incorrect comparison7.5 High
- google chromeType Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to...8.8 High
- apple ipados, macos, safari +5 more +7 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iPadOS...8.8 High
- apple macosA logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15...5.5 Medium
- google chromeType Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to...8.8 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +6 more +8 moreWindows Remote Desktop Services Remote Code Execution Vulnerability8.1 High
kvm-ioctlscrates.ioUndefined behaviour in `kvm_ioctls::ioctls::vm::VmFd::create_device`No score- google chromeType Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to...8.8 High
- irfanviewIrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- irfanviewIrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- google androidIn the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to...7.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to...8.8 High
- google androidIn writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of...7.8 High
- microsoft .net, .net 9.0, visual studio 2022 version 17.10 +5 more +7 more.NET and Visual Studio Remote Code Execution Vulnerability9.8 Critical
- google android, mediatek mt6739, mt6761 +12 more +14 moreIn m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google chromeType Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to...8.8 High
- linux, linux kernel +1 moreACPI: sysfs: validate return type of _STR method7.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- google chromeType Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to...8.8 High
- webroot secureanywhere - web shield, secureanywhere web shield +1 moreType-confusion vulnerability that can cause the WRSA.exe service to crash and generate a crash dump6.3
- webroot secureanywhere - web shield, secureanywhere web shield +1 moreType confusion that can cause the WRSA.exe service to crash and generate a crash dump6.2
- jenkinsJenkins item creation restriction bypass vulnerability4.3 Medium
- google androidIn checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent...7.7 High
- google chromeType Confusion in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform...8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- google chromeType Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to...8.8 High
- apple ipados, macos, safari +5 more +7 moreA type confusion issue was addressed with improved state handling. This issue is fixed in watchOS...4.3 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)7.8 High
- drupal security kit, security kit project kit +1 moreSecurity Kit - Less critical - Denial of Service - SA-CONTRIB-2024-0395.3 Medium
- google chromeType Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA potentially exploitable type confusion could be triggered when looking up a property name on an...9.8 Critical
- netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 morePossible denial of service in X.509 name checks7.5 High
- google chromeType Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to...8.8 High
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Edge (HTML-based) Memory Corruption Vulnerability6.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.8 High
- google chrome, chromium v8, microsoft edge +2 moreType confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit...9.6 Critical
- google chromeType Confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to...8.8 High
- ecma international ecma262JavaScript specification issue may lead to type confusion and pointer dereference in implementations8.6 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 moreScripting Engine Memory Corruption Vulnerability7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Edge (HTML-based) Memory Corruption Vulnerability8.4 High
- google chromeType Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code...8.8 High
- google androidIn shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from...5.5 Medium
- apple macosA type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14...7.5 High
- apple ipados, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16...5.5 Medium
- Show moreLoading…