CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

847 vulnerabilities with CWE-843
CVE-2023-36017 HIGH
Windows Scripting Engine - Memory Corruption
CVSS 8.8
CVE-2023-32835 MEDIUM
Android - Local Privilege Escalation via Type Confusion in keyinstall
CVSS 6.7
CVE-2023-32834 MEDIUM
Android - Memory Corruption via Type Confusion in secmem
CVSS 6.7
CVE-2023-32818 MEDIUM
Android - Local Privilege Escalation via Type Confusion in vdec
CVSS 6.7
CVE-2023-38128 HIGH
Justsystems Easy Postcard Max - Out-of-Bounds Write
CVSS 7.8
CVE-2023-44108 HIGH
Distributed File Module - Memory Corruption
CVSS 7.5
CVE-2023-44094 MEDIUM
Distributed File Module - Memory Corruption
CVSS 5.3
CVE-2023-36594 HIGH
Windows Graphics Component - Privilege Escalation
CVSS 7.8
CVE-2023-36578 HIGH
Microsoft Windows MSMQ - Remote Code Execution via Type Confusion
CVSS 7.3
CVE-2023-5346 HIGH
Google Chrome < 117.0.5938.149 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2023-43154 CRITICAL
Macs CMS 1.1.4f - Authentication Bypass via PHP Type Confusion in isValidLogin()
CVSS 9.8
CVE-2023-42464 CRITICAL
Netatalk 3.1.x < 3.1.17 - Type Confusion in Spotlight RPC Packet Parsing
CVSS 9.8
CVE-2023-38074 HIGH
Siemens JT2Go < 14.3.0.1 - Remote Code Execution via WRL File Parsing
CVSS 7.8
CVE-2023-38073 HIGH
Siemens JT2Go < 14.3.0.1 - Remote Code Execution via WRL File Parsing
CVSS 7.8
CVE-2023-4762 HIGH KEV
Google Chrome < 116.0.5845.179 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2023-4352 HIGH
Google Chrome <116.0.5845.96 - Heap Corruption
CVSS 8.8
CVE-2023-32358 HIGH
iPadOS 16.0-16.3 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2023-21287 CRITICAL
Android - Remote Code Execution via Type Confusion
CVSS 9.8
CVE-2023-28575 MEDIUM
Qualcomm Firmware - Type Confusion in cam_get_device_priv
CVSS 6.7
CVE-2023-4194 MEDIUM
Linux Kernel < 6.4 - Unauthorized Resource Access via TUN/TAP Socket UID Initialization
CVSS 5.5
CVE-2023-4070 HIGH
Google Chrome <115.0.5790.170 - RCE
CVSS 8.1
CVE-2023-4069 HIGH
Google Chrome <115.0.5790.170 - Heap Corruption
CVSS 8.8
CVE-2023-4068 HIGH
Google Chrome <115.0.5790.170 - RCE
CVSS 8.1
CVE-2023-28729 HIGH
Panasonic Control FPWIN Pro <7.6.0.3 - RCE
CVSS 7.8
CVE-2023-34967 MEDIUM
Samba < 4.16.11 - Denial of Service via mdssvc RPC Spotlight Type Confusion
CVSS 5.3
Details
Vulnerabilities 847
Links
MITRE CWE Entry Search this CWE With Exploits