CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome, chromium v8 +1 moreType confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform...8.1 High
- google chromeType Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to...8.8 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- openatom openharmonyarkui_ace_engine has a type confusion vulnerability3.3 Low
- openatom openharmonyarkui_ace_engine has a type confusion vulnerability3.3 Low
- samsung exynos 1480 firmware, exynos 2400 firmware +1 moreAn issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type...7.5 High
- crates scsirSCSIR has a Potential Unsound Issue in WriteSameCommand2.9 Low
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 moreScripting Engine Memory Corruption Vulnerability7.5 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- adobe dreamweaver, dreamweaver desktop +1 moreDreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)7.8 High
- casualx obfstrobfstr Type Confusion vulnerability2.9 Low
- apple ipados, macos, tvos +3 more +5 moreAn access issue was addressed with improved access restrictions. This issue is fixed in macOS...5.4 Medium
- apple ipados, macos, tvos +3 more +5 moreA type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia...6.5 Medium
- honor baidu, com. hihonor.baidu.browser +1 moreType Confusion Vulnerability in Browser4.3 Medium
- framasoft peertubePeerTube ActivityPub Playlist Creation Blind SSRF and DoS7.5 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- zend zendtoA type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote...4.8 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- google androidIn avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This...9.8 Critical
- apple ipados, macos, safari +5 more +7 moreThis issue was addressed with improved handling of floats. This issue is fixed in tvOS 18.4,...7.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- ashlar cobaltAshlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to...8.8 High
- jqlang jqjq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c.8.1 High
- lexmark cx, xc, cs, ms, mx, xm, et. al.Access of Resource Using Incompatible Type in Postscript interpreter7.3 High
- lexmark cx, xc, cs, ms, mx, xm, et. al.Type confusion vulnerability in the Postscript interpreter in various Lexmark devices7.3 High
- mercedes-benz headunit ntg6 mercedes-benz user experienceAn issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible type...4.6 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- zoom communications, inc workplace app for linux, zoom meeting software development kit, video software development kit +1 more +3 moreZoom Workplace App for Linux - Type Confusion8.8 High
- apple ipados, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4,...8.0 High
- apple ipados, macos, ios and ipados +1 more +3 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved checks. This issue is fixed in visionOS 2.3,...7.5 High
- zopefoundation restrictedpythontry/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter7.9 High
- linuxfoundation magmaA type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit...9.8 Critical
- microsoft windows server 2022, 23h2 edition (server core installation), windows server 2025, windows server 2025 (server core installation) +1 more +3 moreInternet Explorer Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +6 more +8 moreWindows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability5.9 Medium
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- ivanti endpoint managerAn out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...7.8 High
- strawberry-graphql strawberryStrawberry GraphQL has a type resolution vulnerability3.7 Low
- google chromeType Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to...8.8 High
- ashlar cobaltAshlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- delta electronics drasimucadDelta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- Show moreLoading…