CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Core Messaging Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Group Policy Elevation of Privilege Vulnerability8.0 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreType Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service7.1 High
- mediatek, inc. mediatek chipsetIn Power HAL, there is a possible escalation of privilege due to type confusion. This could lead...6.7 Medium
- google chromeType confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker...8.8 High
- google chrome, v8, chromium v8 +2 moreType confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute...8.8 High
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- watchguard fireware osFireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution9.3 Critical
- spring cloud stream, vmware spring cloud stream +1 moreImproper caching of the original content type in Spring Cloud Stream Avro3.1 Low
- openstack keystoneIn OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project...7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root5.7 Medium
- google chromeType confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging...8.8 High
- google chromeType confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.8 High
- google chromeType confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeType confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...8.3 High
- sparklemotion nokogiriNokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args8.7 High
- amazon freertos, freertos freertos-kernel +1 moreMissing type validation in xQueueAddToSet in FreeRTOS-Kernel8.2 High
- leanprover lean4Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections6.8 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.8 Critical
- go-vikunja vikunjaVikunja through 2.4.0 Principal-Type Confusion via LinkSharing7.7 High
- google chromeType confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...8.8 High
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DOM: Service Workers component9.1 Critical
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT component6.5 Medium
- postgresqlPostgreSQL refint plan cache type confusion executes arbitrary code8.8 High
- postgresqlPostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code8.8 High
- postgresqlPostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code8.8 High
- postgresqlPostgreSQL type confusion via "internal" arguments8.8 High
- postgresqlPostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read8.1 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability5.4 Medium
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreType Confusion in MongoDB Query Subsystem Leads to Denial of Service7.1 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +12 more +14 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Privilege Escalation8.6 High
- apache foryApache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization9.8 Critical
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.4 High
- google chromeType Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute...8.8 High
- Show moreLoading…