CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

847 vulnerabilities with CWE-843
CVE-2023-2033 HIGH KEV
Google Chrome < 112.0.5615.121 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2023-28243 HIGH
Microsoft Windows PostScript and PCL6 Class Printer Driver - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2023-24929 HIGH
Microsoft PostScript and PCL6 Class Printer Driver - RCE
CVSS 8.8
CVE-2023-24927 HIGH
Microsoft PostScript and PCL6 Class Printer Driver - RCE
CVSS 8.8
CVE-2023-24885 HIGH
Microsoft PostScript and PCL6 Class Printer Driver - RCE
CVSS 8.8
CVE-2023-26063 CRITICAL
Lexmark <2023-02-19 - Info Disclosure
CVSS 9.8
CVE-2023-1078 HIGH
Linux Kernel 4.17-4.19.273 - Type Confusion in RDS Protocol via rds_rm_zerocopy_callback
CVSS 7.8
CVE-2023-1077 HIGH
Linux Kernel 2.6.25-4.19.293 - Use-After-Free via pick_next_rt_entity Type Confusion
CVSS 7.0
CVE-2023-1076 MEDIUM
Linux Kernel - Type Confusion in tun/tap Socket Initialization
CVSS 5.5
CVE-2023-1075 LOW
Linux Kernel - Type Confusion in tls_is_tx_ready
CVSS 3.3
CVE-2023-21056 MEDIUM
Android - Type Confusion in lwis_slc_buffer_free
CVSS 6.7
CVE-2023-0083 MEDIUM
OpenHarmony <v3.1.5 - Info Disclosure
CVSS 4.0
CVE-2023-1235 MEDIUM
Google Chrome < 111.0.5563.64 - Type Confusion in DevTools
CVSS 6.3
CVE-2023-1215 HIGH
Google Chrome < 111.0.5563.64 - Type Confusion in CSS via Crafted HTML Page
CVSS 8.8
CVE-2023-1214 HIGH
Google Chrome < 111.0.5563.64 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2023-23529 HIGH KEV
Safari < 16.3 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2023-22579 CRITICAL
sequelizejs/sequelize - SQL Injection via Improper Parameter Filtering
CVSS 9.9
CVE-2023-0286 HIGH
OpenSSL 1.0.2-1.0.2zg - Type Confusion in X.400 Address Processing
CVSS 7.4
CVE-2023-0703 HIGH
Google Chrome < 110.0.5481.77 - Type Confusion in DevTools via UI Interactions
CVSS 8.8
CVE-2023-0702 HIGH
Google Chrome < 110.0.5481.77 - Type Confusion in Data Transfer
CVSS 8.8
CVE-2023-0696 HIGH
Google Chrome < 110.0.5481.77 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2023-20616 MEDIUM
Android - Local Privilege Escalation via Type Confusion in ion
CVSS 6.7
CVE-2023-0473 HIGH
Google Chrome < 109.0.5414.119 - Type Confusion in ServiceWorker API
CVSS 8.8
CVE-2023-23455 MEDIUM
Linux Kernel 2.6.12-6.1.4 - Denial of Service via Type Confusion in atm_tc_enqueue
CVSS 5.5
CVE-2023-23454 MEDIUM
Linux Kernel 2.6.12-6.1.4 - Denial of Service via Type Confusion in cbq_classify
CVSS 5.5
Details
Vulnerabilities 847
Links
MITRE CWE Entry Search this CWE With Exploits