CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeMemory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...6.5 Medium
- google chromeMemory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote...6.5 Medium
- apple ipados, macos, safari +3 more +5 moreA type confusion issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple safari, visionos, watchos +2 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 27,...5.4 Medium
libdbi-perlDebian,perl-dbiAlpaquita +1 moreDBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element2.9 Lowlibcpanel-json-xs-perlDebian,perl-Cpanel-JSON-XSAzure Linux +1 moreCpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv6.5 Medium- bytecodealliance wasmtimeWasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type5.7 Medium
- bytecodealliance wasmtimeWasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation9.9 Critical
- palo alto networks globalprotect appGlobalProtect App: Local Denial of Service (DoS) on Windows4.3 Medium
- google chromeType confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute...8.8 High
- microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2, .net framework 3.5 and 4.7.2, .net framework 3.5 and 4.8 +6 more +8 more.NET and Visual Studio Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows StateRepository API Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRPC Runtime Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Device Association Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Input System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Portable Device File System Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows SmartScreen Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Message Queuing Queue Manager Information Disclosure Vulnerability5.5 Medium
- microsoft windows server 2022, windows server 2025, windows server 2025 (server core installation) +2 moreWindows Domain Name Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows CD-ROM Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Domain Name Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Secure Kernel Mode Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- xenVMX: VMentry failure with branch tracing and blocked states5.5 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine: JIT component8.1 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript: WebAssembly component7.1 High
- imagemagickImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders2.0 Low
- rt-threadRT-Thread through 5.3.0 Memory Corruption via USB CDC VCOM Driver5.1 Medium
- zephyrproject zephyrType confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel code7.8 High
- falkordbType confusion in FalkorDB GRAPH.QUERY via the --bolt argument7.7 High
- mongodb libmongocryptHeap corruption via duplicate masterKey fields in MongoDB libmongocrypt8.7 High
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Type Confusion7.5 High
- openbsd opensshIn sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes...3.6 Low
- handlebars-lang handlebars.jsHandlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)9.8 Critical
- google chromeType confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had...8.3 High
- quasarframework quasarQuasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service3.1 Low
- mediatek mt2718 firmware, mt6768 firmware, mt6769 firmware +23 more +25 moreIn mtee, there is a possible escalation of privilege due to type confusion. This could lead to...6.7 Medium
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute...8.8 High
- lxsmnsyc serovalSeroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)9.8 Critical
- google androidIn multiple locations, there is a possible memory corruption due to type confusion. This could...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an...7.8 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a...7.8 High
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a...7.8 High
- Show moreLoading…