CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- offis dicom dcmtk toolkitOFFIS DCMTK Toolkit Type Confusion8.7 High
- apple ipados, macos, safari +5 more +7 moreA type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2,...8.8 High
- langchain-ai langsmith-sdkArbitrary server-side file read in LangSmith SDK TracingMiddleware5.0 Medium
- cedar-policy cedar-javaCedarJava has a type confusion vulnerability8.8 High
- azeotech daqfactoryAccess of resource using incompatible type ('type confusion') in AzeoTech DAQFactory8.4 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +1 more +3 more.NET Denial of Service Vulnerability7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreJIT miscompilation in the DOM: Core & HTML component5.4 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreMemory safety bug fixed in Thunderbird 1525.4 Medium
- the document foundation libreofficeHeap buffer overflow in spreadsheet tracked-changes import5.4 Medium
- the document foundation libreofficeHeap buffer overflow in OOXML text box element import5.4 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows UPnP Device Host Remote Code Execution Vulnerability8.1 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows Hyper-V Remote Code Execution Vulnerability8.4 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 +14 more +16 moreMicrosoft Outlook and Word Remote Code Execution Vulnerability8.4 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler4.3 Medium
- helpfulcrowd product reviewsHelpfulcrowd Product Reviews <= 1.2.9 - Inccorect Authorization via Type Juggling in 'token' Parameter to Arbitrary Settings Update5.3 Medium
- google chromeType Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to...8.8 High
- uscilab cerealUSCiLab Cereal Shared Pointer type confusion6.3 Medium
- google chromeType Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain...6.5 Medium
- google chromeType Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeType Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...9.6 Critical
- google chromeType Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeType Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute...8.8 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic4.4 Medium
- rurban cpanel::json::xs, cpanel\ +1 moreCpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled7.3 High
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT component4.3 Medium
fastnetmonDebianFastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet...5.9 Medium- google androidIn ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type...8.8 High
- nanomqNanoMQ: QUIC Dialer Close Type Confusion4.5 Medium
tarcrates.iotar has a PAX header desynchronization issueNo score- google chromeType Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a...7.5 High
- google chromeType Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- oisf suricataSuricata http2: protocol-change type confusion can lead to denial of service9.1 Critical
- oisf suricataSuricata defrag: missing address-family check can lead to remote crash7.5 High
- containerdcontainerd user ID handling bypass allows runAsNonRoot evasion7.3 High
- google chromeType Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a...7.5 High
- isc bind, bind 9, red hat enterprise linux 10 +9 more +11 moreInvalid handling of CLASS != IN7.5 High
astral-tokio-tarcrates.ioastral-tokio-tar has a PAX Header Desynchronization issue6.9 Medium- google chromeType Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain...6.5 Medium
- google chromeType Confusion in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...3.1 Low
- google chromeType Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...8.8 High
@tanstack/start-server-corenpmTanStack Start - Server Core: Inbound server-function request deserialization could invoke a sibling client-referenced server function6.3 Medium- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreJIT miscompilation in the JavaScript Engine: JIT component8.8 High
- Show moreLoading…