CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

788 vulnerabilities with CWE-843
CVE-2024-12692 HIGH
Google Chrome < 131.0.6778.204 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-54524 MEDIUM
macOS < 15.2 - Unauthenticated Arbitrary File Access via File Handling Logic Issue
CVSS 5.5
CVE-2024-54505 HIGH
Safari < 18.2 - Type Confusion via Malicious Web Content
CVSS 8.8
CVE-2024-49119 HIGH
Windows Server RCE (2016, 2019, 2022, 2022 23H2, 2025)
CVSS 8.1
CVE-2024-12381 HIGH
Google Chrome < 131.0.6778.139 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-12053 HIGH
Google Chrome < 131.0.6778.108 - Type Confusion in V8
CVSS 8.8
CVE-2024-11508 HIGH
IrfanView DXF File Parser - Type Confusion Code Execution
CVSS 7.8
CVE-2024-11507 HIGH
IrfanView DXF File Parser - Type Confusion Code Execution
CVSS 7.8
CVE-2024-11395 HIGH
Google Chrome <131.0.6778.85 - Heap Corruption
CVSS 8.8
CVE-2024-43498 CRITICAL
.NET and Visual Studio - Remote Code Execution via Type Confusion
CVSS 9.8
CVE-2024-20106 MEDIUM
Android - Local Privilege Escalation via m4u Bounds Check Bypass
CVSS 6.7
CVE-2024-10231 HIGH
Google Chrome <130.0.6723.69 - Heap Corruption
CVSS 8.8
CVE-2024-10230 HIGH
Google Chrome <130.0.6723.69 - Heap Corruption
CVSS 8.8
CVE-2024-49860 HIGH
Linux Kernel - Use-After-Free via ACPI _STR Method Return Type Validation
CVSS 7.1
CVE-2024-43596 MEDIUM
Microsoft Edge Chromium < 130.0.2849.46 - Remote Code Execution via Type Confusion
CVSS 6.5
CVE-2024-9859 HIGH
Google Chrome < 126.0.6478.126 - Remote Code Execution via WebAssembly Type Confusion
CVSS 8.8
CVE-2024-9603 HIGH
Google Chrome < 129.0.6668.100 - Type Confusion in V8
CVSS 8.8
CVE-2024-9602 HIGH
Google Chrome < 129.0.6668.100 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-7825 CRITICAL
Webroot SecureAnywhere Web Shield < 2.1.2.3 - Type Confusion in wrUrl.Dll
CVSS 9.8
CVE-2024-7824 CRITICAL
Webroot SecureAnywhere Web Shield < 2.1.2.3 - Type Confusion in wrUrl.Dll
CVSS 9.8
CVE-2024-47804 MEDIUM
Jenkins < 2.462.3 and < 2.479 - Unauthenticated Item Creation Restriction Bypass via CLI or REST API
CVSS 4.3
CVE-2024-9122 HIGH
Google Chrome < 129.0.6668.70 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-43489 MEDIUM
Microsoft Edge Chromium < 129.0.2792.52 - Remote Code Execution via Type Confusion
CVSS 6.5
CVE-2024-8904 HIGH
Google Chrome < 129.0.6668.58 - Type Confusion in V8
CVSS 8.8
CVE-2024-45112 HIGH
Acrobat Reader <24.002.21005-20.005.30655 - RCE
CVSS 7.8
Details
Vulnerabilities 788
Links
MITRE CWE Entry Search this CWE With Exploits