CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

789 vulnerabilities with CWE-843
CVE-2021-30627 HIGH
Google Chrome <93.0.4577.82 - Heap Corruption
CVSS 8.8
CVE-2021-23447 MEDIUM
teddy < 0.5.9 - Type Confusion via Array Model Content
CVSS 5.4
CVE-2021-39841 HIGH
Adobe Acrobat and Acrobat Reader DC < 21.005.20058 - Type Confusion
CVSS 7.8
CVE-2021-23444 MEDIUM
jointjs < 3.4.2 - Type Confusion via setByPath Function
CVSS 5.6
CVE-2021-23443 MEDIUM
edge.js < 5.3.2 - Type Confusion via Array Input Bypass
CVSS 5.4
CVE-2021-39219 MEDIUM
Wasmtime < 0.30.0 - Type Confusion via Cross-Engine Linker Usage
CVSS 6.3
CVE-2021-38658 HIGH
Microsoft Office - Remote Code Execution via Type Confusion
CVSS 7.8
CVE-2021-23440 HIGH
set-value < 2.0.1 and 3.0.0-4.0.1 - Type Confusion via Array Path Parameter
CVSS 7.3
CVE-2021-1829 CRITICAL
macOS < 11.3 - Type Confusion to Kernel Code Execution
CVSS 9.8
CVE-2021-30758 HIGH
Apple OSes and Safari - Code Execution via Malicious Web Content
CVSS 8.8
CVE-2021-23438 MEDIUM
mpath < 0.8.4 - Type Confusion via Array IndexOf Bypass
CVSS 5.6
CVE-2021-23436 MEDIUM
immer < 9.0.6 - Type Confusion via Array Path Parameter
CVSS 5.6
CVE-2021-23434 MEDIUM
object-path < 0.11.6 - Type Confusion via Array Path Components
CVSS 5.6
CVE-2021-30599 HIGH
Google Chrome < 92.0.4515.159 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2021-30598 HIGH
Google Chrome < 92.0.4515.159 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2021-31008 HIGH
Safari < 15.1 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2021-30954 HIGH
Apple OSes and Safari - Code Execution via Malicious Web Content
CVSS 7.8
CVE-2021-30869 HIGH KEV
iOS <12.5.5, iPadOS <14.4, macOS Big Sur <11.2 - Code Injection
CVSS 7.8
CVE-2021-30859 HIGH
iPadOS < 14.8 - Remote Code Execution via Type Confusion
CVSS 7.8
CVE-2021-30852 HIGH
Apple OSes - Code Execution via Malicious Web Content
CVSS 8.8
CVE-2021-35986 LOW
Acrobat Reader DC <2021.005.20054 - Info Disclosure
CVSS 3.3
CVE-2021-28643 LOW
Acrobat Reader DC < 21.005.20054 and < 17.011.30197 - Unauthenticated Type Confusion via Malicious File
CVSS 3.3
CVE-2021-30588 HIGH
Google Chrome <92.0.4515.107 - Heap Corruption
CVSS 8.8
CVE-2021-30563 HIGH KEV
Google Chrome <91.0.4472.164 - Heap Corruption
CVSS 8.8
CVE-2021-30561 HIGH
Google Chrome <91.0.4472.164 - Heap Corruption
CVSS 8.8
Details
Vulnerabilities 789
Links
MITRE CWE Entry Search this CWE With Exploits