CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

847 vulnerabilities with CWE-843
CVE-2024-7520 HIGH
Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1 - Remote Code Execution via WebAssembly Type Confusion
CVSS 8.8
CVE-2024-40803 HIGH
macOS Sonoma- Ventura - Info Disclosure
CVSS 7.5
CVE-2024-40788 MEDIUM
iPadOS < 16.7.9 - Denial of Service via Type Confusion
CVSS 5.5
CVE-2024-37987 HIGH
Windows 10 1507-22H2 and Windows 11 21H2-23H2 - Secure Boot Security Feature Bypass via Type Confusion
CVSS 8.0
CVE-2024-36278 LOW
OpenHarmony <4.0.0 - Memory Corruption
CVSS 3.3
CVE-2024-31071 LOW
OpenHarmony < 4.0 - Type Confusion
CVSS 3.3
CVE-2024-20078 CRITICAL
Android - Local Privilege Escalation via Type Confusion in venc
CVSS 9.8
CVE-2024-6100 HIGH
Google Chrome < 126.0.6478.114 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2024-32922 HIGH
Android - Local Privilege Escalation to TEE via GPU Power Management Logic Error
CVSS 7.4
CVE-2024-32919 HIGH
Android - Local Privilege Escalation via Type Confusion in lwis_add_completion_fence
CVSS 7.8
CVE-2024-32892 HIGH
Android - Local Privilege Escalation via Type Confusion in Goodix Main Component
CVSS 7.8
CVE-2024-5843 MEDIUM
Google Chrome < 126.0.6478.54 - Security UI Obfuscation via Malicious File Download
CVSS 6.5
CVE-2024-5838 HIGH
Google Chrome < 126.0.6478.54 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-5837 HIGH
Google Chrome < 126.0.6478.54 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-5833 HIGH
Google Chrome < 126.0.6478.54 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-5830 HIGH
Google Chrome < 126.0.6478.54 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2024-5597 HIGH
Fuji Electric Monitouch V-SFT < 6.2.3.0 - Type Confusion
CVSS 7.8
CVE-2024-5436 CRITICAL
Snapchat LensCore < 12.88 - Type Confusion
CVSS 9.8
CVE-2024-5271 HIGH
Fuji Electric Monitouch V-SFT < 6.2.3.0 - Remote Code Execution via Type Confusion
CVSS 7.8
CVE-2024-5274 CRITICAL KEV
Google Chrome < 125.0.6422.112 - Remote Code Execution via V8 Type Confusion
CVSS 9.6
CVE-2024-5158 HIGH
Google Chrome < 125.0.6422.76 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.1
CVE-2024-4947 CRITICAL KEV
Google Chrome < 125.0.6422.60 - Remote Code Execution via V8 Type Confusion
CVSS 9.6
CVE-2024-30034 MEDIUM
Windows Cloud Files Mini Filter Driver - Info Disclosure
CVSS 5.5
CVE-2024-32063 HIGH
Siemens Simcenter Femap < V2406 - IGS File Type Confusion Code Execution
CVSS 7.8
CVE-2024-32062 HIGH
Simcenter Femap <V2406 - Code Injection
CVSS 7.8
Details
Vulnerabilities 847
Links
MITRE CWE Entry Search this CWE With Exploits