CWE-843 · Access of Resource Using Incompatible Type (Type Confusion) (page 5)
Page 5 of 9 — CVEs classified under CWE-843, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21357 | High | 8.1 | 2024-02-13 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2024-20012 | Medium | 6.7 | 2024-02-05 | In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20010 | Medium | 6.7 | 2024-02-05 | In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-23222 | High | 8.8 | 2024-01-23 | A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS… |
CVE-2024-0518 | High | 8.8 | 2024-01-16 | Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-41075 | High | 7.8 | 2024-01-10 | A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7… |
CVE-2023-41060 | High | 8.8 | 2024-01-10 | A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. A remote user may be able to cause ker… |
CVE-2024-20662 | Medium | 4.9 | 2024-01-09 | Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability |
CVE-2023-6939 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service. |
CVE-2023-51428 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-51427 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-51426 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-23443 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-23442 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-6702 | High | 8.8 | 2023-12-14 | Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-48694 | Medium | 6.8 | 2023-12-05 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code… |
CVE-2023-6348 | High | 8.8 | 2023-11-29 | Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2023-41257 | High | 8.8 | 2023-11-27 | A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code inside a malici… |
CVE-2023-6045 | Medium | 5.9 | 2023-11-20 | in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion. |
CVE-2023-46705 | Medium | 6.2 | 2023-11-20 | in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion. |
CVE-2023-36017 | High | 8.8 | 2023-11-14 | Windows Scripting Engine Memory Corruption Vulnerability |
CVE-2023-32835 | Medium | 6.7 | 2023-11-06 | In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-32834 | Medium | 6.7 | 2023-11-06 | In secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32818 | Medium | 6.7 | 2023-11-06 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-38128 | High | 7.8 | 2023-10-19 | An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause a type c… |
CVE-2023-44108 | High | 7.5 | 2023-10-11 | Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2023-44094 | Medium | 5.3 | 2023-10-11 | Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2023-36594 | High | 7.8 | 2023-10-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-36578 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-5346 | High | 8.8 | 2023-10-05 | Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-43154 | Critical | 9.8 | 2023-09-27 | In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during login attempt results in PHP type confus… |
CVE-2023-42464 | Critical | 9.8 | 2023-09-20 | A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encode… |
CVE-2023-38074 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-38073 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |
CVE-2023-4762 | High | 8.8 | 2023-09-05 | Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s… |
CVE-2023-4352 | High | 8.8 | 2023-08-15 | Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-32358 | High | 8.8 | 2023-08-14 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead… |
CVE-2022-46706 | High | 7.8 | 2023-08-14 | A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur… |
CVE-2023-21287 | Critical | 9.8 | 2023-08-14 | In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileg… |
CVE-2023-28575 | Medium | 6.7 | 2023-08-08 | The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handl… |
CVE-2023-4194 | Medium | 5.5 | 2023-08-07 | A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to som… |
CVE-2023-4070 | High | 8.1 | 2023-08-03 | Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium secu… |
CVE-2023-4069 | High | 8.8 | 2023-08-03 | Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-4068 | High | 8.1 | 2023-08-03 | Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium secu… |
CVE-2022-4912 | High | 8.8 | 2023-07-29 | Type Confusion in MathML in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-28729 | High | 7.8 | 2023-07-21 | A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specia… |
CVE-2023-34967 | Medium | 5.3 | 2023-07-20 | A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is… |
CVE-2023-32664 | High | 8.8 | 2023-07-19 | A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially crafted Javascript code insi… |
CVE-2023-36887 | High | 7.8 | 2023-07-14 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2023-38199 | Critical | 9.8 | 2023-07-13 | coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not detect multiple Content-Type request headers on some platforms. This might allow attac… |
CVE-2023-35356 | High | 7.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35297 | High | 8.1 | 2023-07-11 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-37376 | High | 7.8 | 2023-07-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-2234 | Medium | 6.8 | 2023-07-10 | Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host. |
CVE-2022-48511 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio featu… |
CVE-2023-20768 | Medium | 6.7 | 2023-07-04 | In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-3420 | High | 8.8 | 2023-06-26 | Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-32439 | High | 8.8 | 2023-06-23 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13… |
CVE-2023-27930 | High | 7.8 | 2023-06-23 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app… |
CVE-2023-3022 | Medium | 5.5 | 2023-06-19 | A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6_info and other tim… |
CVE-2023-3216 | High | 8.8 | 2023-06-13 | Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-20747 | Medium | 4.4 | 2023-06-06 | In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User i… |
CVE-2023-3079 | High | 8.8 | 2023-06-05 | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-28162 | High | 8.8 | 2023-06-02 | While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash… |
CVE-2023-2936 | High | 8.8 | 2023-05-30 | Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-2935 | High | 8.8 | 2023-05-30 | Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-24599 | Medium | 4.3 | 2023-05-29 | OX App Suite before backend 7.10.6-rev37 allows authenticated users to change the appointments of arbitrary users via conflicting ID numbers, aka "ID confusion… |
CVE-2023-25933 | Critical | 9.8 | 2023-05-18 | A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to execute arbitrary c… |
CVE-2023-23557 | Critical | 9.8 | 2023-05-18 | An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a malicious attacker to… |
CVE-2023-2724 | High | 8.8 | 2023-05-16 | Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-20673 | Medium | 6.7 | 2023-05-15 | In vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-24944 | Medium | 6.5 | 2023-05-09 | Windows Bluetooth Driver Information Disclosure Vulnerability |
CVE-2023-24823 | Critical | 9.8 | 2023-04-24 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 20… |
CVE-2021-33970 | Critical | 10.0 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Chrome v13.0.2170.0 allows attacker to escalate priveleges. |
CVE-2023-2033 | High | 8.8 | 2023-04-14 | Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-28243 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24929 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24927 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24885 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2021-46878 | High | 7.8 | 2023-04-11 | An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flb_pack_msgpack_to_json_format leads to type confusion bug that interprets wha… |
CVE-2023-26063 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type. |
CVE-2022-37377 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;. User interaction is required… |
CVE-2023-1078 | High | 7.8 | 2023-03-27 | A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causin… |
CVE-2023-1077 | High | 7.0 | 2023-03-27 | In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but… |
CVE-2023-1076 | Medium | 5.5 | 2023-03-27 | A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While… |
CVE-2023-1075 | Low | 3.3 | 2023-03-27 | A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head… |
CVE-2023-21056 | Medium | 6.7 | 2023-03-24 | In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege wit… |
CVE-2023-0083 | Medium | 4.0 | 2023-03-10 | The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerabi… |
CVE-2023-1235 | Medium | 6.3 | 2023-03-07 | Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
CVE-2023-1215 | High | 8.8 | 2023-03-07 | Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-1214 | High | 8.8 | 2023-03-07 | Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-23529 | High | 8.8 | 2023-02-27 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13… |
CVE-2023-22579 | Critical | 9.9 | 2023-02-16 | Due to improper parameter filtering in the sequalize js library, can a attacker peform injection. |
CVE-2023-0286 | High | 7.4 | 2023-02-08 | There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the… |
CVE-2023-0703 | High | 8.8 | 2023-02-07 | Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to pote… |
CVE-2023-0702 | High | 8.8 | 2023-02-07 | Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to… |
CVE-2023-0696 | High | 8.8 | 2023-02-07 | Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-20616 | Medium | 6.7 | 2023-02-06 | In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-0473 | High | 8.8 | 2023-01-30 | Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2022-4205 | Medium | 6.3 | 2023-01-27 | In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash. |