CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- openatom openharmonyarkcompiler_ets_runtime has a type confusion vulnerability6.3 Medium
- lexborType Confusion in Lexbor Fragment Parser8.2 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreJIT miscompilation in the JavaScript: WebAssembly component9.8 Critical
- mozilla firefox, thunderbird +1 moreInformation disclosure due to JIT miscompilation in the JavaScript Engine: JIT component7.5 High
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.52.2 CPU Exhaustion via Remote Form Deserialization8.7 High
pyo3crates.ioPyO3 has type confusion when accessing data from sublasses of subclasses of native types with `abi3` feature7.2 High- neeraj slit brevo – email, sms, web push, chat, and more.Brevo - Email, SMS, Web Push, Chat, and more. <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling6.5 Medium
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +5 more +7 moreType confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed...8.4 High
- adobe after effectsAfter Effects | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- huawei harmonyosType confusion vulnerability in the camera module. Impact: Successful exploitation of this...4.0 Medium
- hancom inc. office 2018, office 2020, office 2022 +1 more +3 moreAccess of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom...8.5 High
- google chromeType Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to...8.8 High
- lexmark cstat, cxtat, mslbd, mxlbd, cslbl, cxlbl, cslbn, cxlbn, cstmh, cxtmh, cstpp, cxtpp, mslsg, mxlsg, mxtct, msngm, mstgm, mxngm, mxtgm, csngv, cstgv, cxtgv, msngw, mstgw, mxtgw, cstls, cxtls, mxtls, cstmm, cxtmm, cstpc, cxtpc, mxtpm, msnsn, mstsn, mxtsn, csnzj, cstzj, cxnzj, cxtzj +1 moreType confusion vulnerability in Postscript interpreter6.9 Medium
- keats jsonwebtokenjsonwebtoken has Type Confusion that leads to potential authorization bypass5.5 Medium
- color iccdeviccDEV Has Type Confusion in CIccTagEmbeddedHeightImage::Validate()7.1 High
- zephyrproject-rtos zephyrnet: icmp: Out of bound memory read6.5 Medium
- themrdemonized xray-monolithType confusion in xray-monolith9.1 Critical
dyn-futurecrates.ioDynFuture Drop Can Construct a Dangling Reference6.3 Medium- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWin32k Elevation of Privilege Vulnerability7.8 High
- color iccdeviccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in CIccSegmentedCurveXml::ToXml() at IccXML/IccLibXML/IccMpeXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in ToXmlCurve() at IccXML/IccLibXML/IccMpeXml.cpp8.8 High
- color iccdeviccDEV has Type Confusion in CIccTag:IsTypeCompressed()5.4 Medium
- color iccdeviccDEV has Type Confusion in CIccTagXmlTagData::ToXml()6.3 Medium
- color iccdeviccDEV has Type Confusion in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp6.5 Medium
- color iccdeviccDEV has Type Confusion in icStatusCMM::CIccEvalCompare::EvaluateProfile()8.8 High
- preactjs preactPreact has JSON VNode Injection issue7.2 High
- tarkov data manager, the-hideout tarkov-data-manager +1 moreTarkov Data Manager Authentication Bypass vulnerability9.8 Critical
- color iccdeviccDEV has Undefined Behavior (UB) - Invalid Enum Value5.5 Medium
- color iccdeviccDEV has Type Confusion during XML Curve Serialization6.6 Medium
- jsishA type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT...9.8 Critical
- apple ipados, macos, safari +3 more +5 moreA type confusion issue was addressed with improved state handling. This issue is fixed in Safari...4.3 Medium
- apple macosA logic error was addressed with improved error handling. This issue is fixed in macOS Tahoe 26.1...7.5 High
- azeotech daqfactoryType Confusion vulnerability in AzeoTech DAQFactory7.3 High
- microsoft office, 365 apps, 365 copilot +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT component9.8 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT component7.3 High
- google chromeType Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to...8.8 High
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 moreCODESYS Control - Invalid type usage in visualization7.5 High
- huawei harmonyosPermission control vulnerability in the distributed component. Impact: Successful exploitation of...8.0 High
- huawei harmonyosPermission control vulnerability in the memory management module. Impact: Successful exploitation...9.3 Critical
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to...8.8 High
- google chrome, chromium v8, siemens cadra +2 moreType Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to...8.8 High
- salesagility suitecrmSuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment' Functionality8.8 High
- entr'ouvert lassoA type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr&...9.8 Critical
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to...8.8 High
- Show moreLoading…