CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform...8.8 High
uvPyPIuv has differential in tar extraction with PAX headersNo score- astral-sh tokio-tarastral-tokio-tar Vulnerable to PAX Header Desynchronization8.1 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibxslt: type confusion in exsltfuncresultcompfunction of libxslt3.1 Low
- python-ldappython-ldap has sanitization bypass in ldap.filter.escape_filter_chars5.5 Medium
- autodesk revit, revit lt +1 moreRFA File Parsing Type Confusion Vulnerability7.8 High
- digitalocean @digitalocean/do-markdownit, do-markdownit +1 more@digitalocean/do-markdownit has Type Confusion vulnerability5.4 Medium
- google chrome, chromium v8, siemens cadra +2 moreType confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to...9.8 Critical
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt LI File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- apple ipados, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS...5.5 Medium
- apple macosA type confusion issue was addressed with improved memory handling. This issue is fixed in macOS...6.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Defender Firewall Service Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Defender Firewall Service Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Defender Firewall Service Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Defender Firewall Service Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Defender Firewall Service Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Defender Firewall Service Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreGraphics Kernel Remote Code Execution Vulnerability7.3 High
- amd -amd radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products +1 moreType confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability...8.7 High
- salesforce tableau server, tableau desktop, tableau server +1 moreAccess of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau...9.3 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability8.8 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +9 more +11 moreDirectX Graphics Kernel Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +8 more +10 moreWin32k Elevation of Privilege Vulnerability7.8 High
- openatom openharmonyarkcompiler_ets_runtime has a type confusion vulnerability3.3 Low
- latkecrszy linkjoinLinkJoin through 882f196 mishandles lacks type checking in password reset.7.4 High
- huawei harmonyosVulnerability of using incompatible types to access resources in the location service. Impact:...4.5 Medium
- google chromeType Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to...8.8 High
- invt vt-designer, vt designer +1 moreINVT VT-Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- gnome libxslt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibxslt: type confusion in xmlnode.psvi between stylesheet and source nodes7.5 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability7.8 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- Show moreLoading…