CWE-843 · Access of Resource Using Incompatible Type (Type Confusion) (page 4)
Page 4 of 9 — CVEs classified under CWE-843, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13047 | High | 7.8 | 2024-12-30 | Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2024-12836 | High | 7.8 | 2024-12-30 | Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… |
CVE-2024-12834 | High | 7.8 | 2024-12-30 | Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra… |
CVE-2024-56522 | High | 7.5 | 2024-12-27 | An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF ta… |
CVE-2024-12692 | High | 8.8 | 2024-12-18 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-54524 | Medium | 5.5 | 2024-12-12 | A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to access arbitrary files. |
CVE-2024-54505 | High | 8.8 | 2024-12-12 | A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia… |
CVE-2024-49119 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-12381 | High | 8.8 | 2024-12-12 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-12053 | High | 8.8 | 2024-12-03 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chro… |
CVE-2024-11508 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2024-11507 | High | 7.8 | 2024-11-22 | IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected… |
CVE-2018-9471 | High | 7.8 | 2024-11-20 | In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation of privil… |
CVE-2024-11395 | High | 8.8 | 2024-11-19 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2018-9339 | High | 7.8 | 2024-11-19 | In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to local escal… |
CVE-2024-43498 | Critical | 9.8 | 2024-11-12 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2024-20106 | Medium | 6.7 | 2024-11-04 | In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-10231 | High | 8.8 | 2024-10-22 | Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-10230 | High | 8.8 | 2024-10-22 | Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-49860 | High | 7.3 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return val… |
CVE-2024-43596 | Medium | 6.5 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-9859 | High | 8.8 | 2024-10-11 | Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium s… |
CVE-2024-9603 | High | 8.8 | 2024-10-08 | Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-9602 | High | 8.8 | 2024-10-08 | Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chro… |
CVE-2024-7825 | Critical | 9.8 | 2024-10-03 | Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll m… |
CVE-2024-7824 | Critical | 9.8 | 2024-10-03 | Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll m… |
CVE-2024-47804 | Medium | 4.3 | 2024-10-02 | If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Je… |
CVE-2024-9122 | High | 8.8 | 2024-09-25 | Type Confusion in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromiu… |
CVE-2024-43489 | Medium | 6.5 | 2024-09-19 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-8904 | High | 8.8 | 2024-09-17 | Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-45112 | High | 7.8 | 2024-09-13 | Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confusion vulnerability that could result in… |
CVE-2024-8638 | High | 8.8 | 2024-09-11 | Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chro… |
CVE-2024-7652 | High | 7.5 | 2024-09-06 | An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an ex… |
CVE-2024-6119 | High | 7.5 | 2024-09-03 | Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address r… |
CVE-2024-8385 | Critical | 9.8 | 2024-09-03 | A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability af… |
CVE-2024-8381 | Critical | 9.8 | 2024-09-03 | A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerabili… |
CVE-2024-8194 | High | 8.8 | 2024-08-28 | Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-38207 | Medium | 6.3 | 2024-08-23 | Microsoft Edge (HTML-based) Memory Corruption Vulnerability |
CVE-2024-38209 | High | 7.8 | 2024-08-22 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-7971 | Critical | 9.6 | 2024-08-21 | Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security s… |
CVE-2024-7969 | High | 8.8 | 2024-08-21 | Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-34742 | Medium | 5.5 | 2024-08-15 | In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could l… |
CVE-2024-43357 | High | 8.6 | 2024-08-15 | ECMA-262 is the language specification for the scripting language ECMAScript. A problem in the ECMAScript (JavaScript) specification of async generators, intro… |
CVE-2024-38178 | High | 7.5 | 2024-08-13 | Scripting Engine Memory Corruption Vulnerability |
CVE-2024-38219 | Medium | 6.5 | 2024-08-12 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-38218 | High | 8.4 | 2024-08-12 | Microsoft Edge (HTML-based) Memory Corruption Vulnerability |
CVE-2024-7550 | High | 8.8 | 2024-08-06 | Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-7520 | High | 8.8 | 2024-08-06 | A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox… |
CVE-2024-40803 | High | 7.5 | 2024-07-29 | A type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An attacker m… |
CVE-2024-40788 | Medium | 5.5 | 2024-07-29 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monter… |
CVE-2024-37987 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-36278 | Low | 3.3 | 2024-07-02 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion. |
CVE-2024-31071 | Low | 3.3 | 2024-07-02 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion. |
CVE-2024-20078 | Critical | 9.8 | 2024-07-01 | In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2024-6100 | High | 8.8 | 2024-06-20 | Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s… |
CVE-2024-32922 | High | 7.4 | 2024-06-13 | In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to loc… |
CVE-2024-32919 | High | 7.8 | 2024-06-13 | In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privile… |
CVE-2024-32892 | High | 7.8 | 2024-06-13 | In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no add… |
CVE-2024-5843 | Medium | 6.5 | 2024-06-11 | Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chr… |
CVE-2024-5838 | High | 8.8 | 2024-06-11 | Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromiu… |
CVE-2024-5837 | High | 8.8 | 2024-06-11 | Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa… |
CVE-2024-5833 | High | 8.8 | 2024-06-11 | Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa… |
CVE-2024-5830 | High | 8.8 | 2024-06-11 | Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chrom… |
CVE-2024-5597 | High | 7.8 | 2024-06-10 | Fuji Electric Monitouch V-SFT is vulnerable to a type confusion, which could cause a crash or code execution. |
CVE-2024-5436 | Critical | 9.8 | 2024-05-31 | Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We recommend upgrading to version 12.88… |
CVE-2024-5271 | High | 7.8 | 2024-05-30 | Fuji Electric Monitouch V-SFT is vulnerable to an out-of-bounds write because of a type confusion, which could result in arbitrary code execution. |
CVE-2024-5274 | Critical | 9.6 | 2024-05-28 | Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
CVE-2024-5158 | High | 8.1 | 2024-05-22 | Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary read/write via a crafted HTML page. (Ch… |
CVE-2023-46842 | Medium | 6.5 | 2024-05-16 | Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit… |
CVE-2024-4947 | Critical | 9.6 | 2024-05-15 | Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chr… |
CVE-2024-30034 | Medium | 5.5 | 2024-05-14 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
CVE-2024-32063 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing I… |
CVE-2024-32062 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing I… |
CVE-2024-32057 | High | 7.8 | 2024-05-14 | A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing I… |
CVE-2023-51560 | High | 7.8 | 2024-05-03 | Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2023-42105 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2023-42102 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2023-42074 | High | 7.8 | 2024-05-03 | PDF-XChange Editor addScript Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
CVE-2023-38091 | High | 7.8 | 2024-05-03 | Kofax Power PDF response Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i… |
CVE-2024-34394 | High | 8.1 | 2024-05-02 | libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode… |
CVE-2024-34393 | High | 8.1 | 2024-05-02 | libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was call… |
CVE-2024-34392 | High | 8.1 | 2024-05-02 | libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xm… |
CVE-2024-34391 | High | 8.1 | 2024-05-02 | libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was calle… |
CVE-2024-4058 | High | 8.8 | 2024-05-01 | Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-25575 | High | 8.8 | 2024-04-30 | A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a… |
CVE-2023-50433 | Medium | 6.5 | 2024-04-29 | marshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by sending a malicious DHCP packet. The cr… |
CVE-2024-26232 | High | 7.3 | 2024-04-09 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-20678 | High | 8.8 | 2024-04-09 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2024-30266 | Low | 3.3 | 2024-04-04 | wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAsse… |
CVE-2024-3298 | High | 7.8 | 2024-04-04 | Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS… |
CVE-2024-30357 | High | 7.8 | 2024-04-02 | Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2024-21834 | Low | 3.3 | 2024-04-02 | in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion. |
CVE-2024-2887 | High | 7.7 | 2024-03-26 | Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium se… |
CVE-2024-1848 | High | 7.8 | 2024-03-22 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2024-27236 | High | 8.4 | 2024-03-11 | In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additiona… |
CVE-2023-49602 | Low | 2.9 | 2024-03-04 | in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion. |
CVE-2024-1939 | High | 8.8 | 2024-02-29 | Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-1938 | High | 8.8 | 2024-02-29 | Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chrom… |
CVE-2024-1847 | High | 7.8 | 2024-02-28 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2024-21363 | High | 7.8 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |