CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

847 vulnerabilities with CWE-843
CVE-2024-9603 HIGH
Google Chrome < 129.0.6668.100 - Type Confusion in V8
CVSS 8.8
CVE-2024-9602 HIGH
Google Chrome < 129.0.6668.100 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-7825 CRITICAL
Webroot SecureAnywhere Web Shield < 2.1.2.3 - Type Confusion in wrUrl.Dll
CVSS 9.8
CVE-2024-7824 CRITICAL
Webroot SecureAnywhere Web Shield < 2.1.2.3 - Type Confusion in wrUrl.Dll
CVSS 9.8
CVE-2024-47804 MEDIUM
Jenkins < 2.462.3 and < 2.479 - Unauthenticated Item Creation Restriction Bypass via CLI or REST API
CVSS 4.3
CVE-2024-9122 HIGH
Google Chrome < 129.0.6668.70 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-43489 MEDIUM
Microsoft Edge Chromium < 129.0.2792.52 - Remote Code Execution via Type Confusion
CVSS 6.5
CVE-2024-8904 HIGH
Google Chrome < 129.0.6668.58 - Type Confusion in V8
CVSS 8.8
CVE-2024-45112 HIGH
Acrobat Reader <24.002.21005-20.005.30655 - RCE
CVSS 7.8
CVE-2024-8638 HIGH
Google Chrome <128.0.6613.137 - RCE
CVSS 8.8
CVE-2024-7652 HIGH
Firefox < 128 and ESR < 115.13 - Type Confusion via Async Generator Handling
CVSS 7.5
CVE-2024-6119 HIGH
OpenSSL 3.0.0-3.0.14, 3.2.0-3.2.2, 3.3.0-3.3.1 - Denial of Service via Invalid Memory Access in Certificate Name Check
CVSS 7.5
CVE-2024-8385 CRITICAL
Firefox < 130.0 and Firefox ESR < 128.2 - Type Confusion via WASM StructFields and ArrayTypes
CVSS 9.8
CVE-2024-8381 CRITICAL
Firefox < 130 and Firefox ESR < 115.15 - Type Confusion via 'with' Environment Property Lookup
CVSS 9.8
CVE-2024-8194 HIGH
Google Chrome <128.0.6613.113 - Heap Corruption
CVSS 8.8
CVE-2024-38207 MEDIUM
Microsoft Edge Chromium < 128.0.2739.42 - Memory Corruption via Type Confusion
CVSS 6.3
CVE-2024-38209 HIGH
Microsoft Edge Chromium < 128.0.2739.42 - Remote Code Execution via Type Confusion
CVSS 7.8
CVE-2024-7971 CRITICAL KEV
Google Chrome < 128.0.6613.84 - Type Confusion in V8 via Crafted HTML Page
CVSS 9.6
CVE-2024-7969 HIGH
Google Chrome < 128.0.6613.84 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-34742 MEDIUM
Android - Local Denial of Service via OwnersData.java Logic Error
CVSS 5.5
CVE-2024-43357 HIGH
ECMA-262 2022-2024 - Type Confusion via Async Generator IteratorResult Then-able Manipulation
CVSS 8.6
CVE-2024-38178 HIGH KEV
Microsoft Windows Scripting Engine - Memory Corruption
CVSS 7.5
CVE-2024-38219 MEDIUM
Microsoft Edge Chromium < 127.0.2651.98 - Remote Code Execution
CVSS 6.5
CVE-2024-38218 HIGH
Microsoft Edge Chromium < 127.0.2651.98 - Memory Corruption
CVSS 8.4
CVE-2024-7550 HIGH
Google Chrome < 127.0.6533.99 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
Details
Vulnerabilities 847
Links
MITRE CWE Entry Search this CWE With Exploits