CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

789 vulnerabilities with CWE-843
CVE-2022-25721 MEDIUM
Qualcomm AQT1000 Firmware - Memory Corruption via Video Driver Type Confusion
CVSS 6.7
CVE-2022-42856 HIGH KEV
Safari < 16.2 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2022-42841 HIGH
macOS 11.0-11.7.1 - Remote Code Execution via Type Confusion
CVSS 7.8
CVE-2022-4262 HIGH KEV
Google Chrome < 108.0.5359.94 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2022-4174 HIGH
Google Chrome < 108.0.5359.71 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2022-3903 MEDIUM
Linux Kernel - Denial of Service via Infrared Transceiver USB Driver
CVSS 4.6
CVE-2022-3889 HIGH
Google Chrome <107.0.5304.106 - Heap Corruption
CVSS 8.8
CVE-2022-3723 HIGH KEV
Google Chrome < 107.0.5304.87 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2022-3652 HIGH
Google Chrome < 107.0.5304.62 - Type Confusion in V8
CVSS 8.8
CVE-2022-42823 HIGH
Safari < 16.1 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2022-3315 HIGH
Google Chrome <106.0.5249.62 - Heap Corruption
CVSS 8.8
CVE-2022-32915 HIGH
macOS < 12.6.3 - Type Confusion Leading to Kernel Code Execution
CVSS 7.8
CVE-2022-3676 MEDIUM
Eclipse Openj9 < 0.35.0 - Type Confusion via Interface Call Inlining
CVSS 6.5
CVE-2022-41033 HIGH KEV
Windows COM+ Event System Service - Privilege Escalation
CVSS 7.8
CVE-2022-32814 HIGH
iPadOS < 15.6 - Type Confusion Leading to Arbitrary Code Execution with Kernel Privileges
CVSS 7.8
CVE-2022-2971 HIGH
libiec61850 < 1.5.0 - Denial of Service via Type Confusion
CVSS 8.6
CVE-2022-34709 MEDIUM
Windows Defender Credential Guard - Security Feature Bypass via Type Confusion
CVSS 6.0
CVE-2022-26435 MEDIUM
Google Android - Out of Bounds Write via Type Confusion
CVSS 6.7
CVE-2022-26433 MEDIUM
Android - Local Privilege Escalation via Mailbox Type Confusion
CVSS 6.7
CVE-2022-26430 MEDIUM
Android - Local Privilege Escalation via Mailbox Type Confusion
CVSS 6.7
CVE-2022-2295 HIGH
Google Chrome < 103.0.5060.114 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2022-1869 MEDIUM
Google Chrome <102.0.5005.61 - Heap Corruption
CVSS 6.5
CVE-2022-1486 HIGH
Google Chrome < 101.0.4951.41 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2022-1364 HIGH KEV
Google Chrome < 100.0.4896.127 - Type Confusion in V8 Turbofan
CVSS 8.8
CVE-2022-1314 HIGH
Google Chrome < 100.0.4896.88 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
Details
Vulnerabilities 789
Links
MITRE CWE Entry Search this CWE With Exploits