CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

847 vulnerabilities with CWE-843
CVE-2021-40871 HIGH
Softing Industrial Automation OPC UA C++ SDK <5.66 - DoS
CVSS 7.5
CVE-2021-31344 MEDIUM
Siemens Capital VSTAR - ICMP Echo Reply Spoofing via Fake IP Options
CVSS 5.3
CVE-2021-23820 MEDIUM
json-pointer < 0.6.2 - Type Confusion via Array Pointer Components
CVSS 5.6
CVE-2021-23807 MEDIUM
jsonpointer < 5.0.0 - Prototype Pollution Bypass via Array Pointer Components
CVSS 5.6
CVE-2021-23624 MEDIUM
dotty < 0.1.2 - Type Confusion via Array Path Parameter
CVSS 5.6
CVE-2021-23509 MEDIUM
json-ptr < 3.0.0 - Type Confusion via Array Keys in Pointer Parameter
CVSS 5.6
CVE-2021-23472 LOW
bootstrap-table < 1.19.1 - Type Confusion in escapeHTML Function
CVSS 3.1
CVE-2021-30818 HIGH
Apple OSes and Safari - Code Execution via Malicious Web Content
CVSS 8.8
CVE-2021-30627 HIGH
Google Chrome <93.0.4577.82 - Heap Corruption
CVSS 8.8
CVE-2021-23447 MEDIUM
teddy < 0.5.9 - Type Confusion via Array Model Content
CVSS 5.4
CVE-2021-39841 HIGH
Adobe Acrobat and Acrobat Reader DC < 21.005.20058 - Type Confusion
CVSS 7.8
CVE-2021-23444 MEDIUM
jointjs < 3.4.2 - Type Confusion via setByPath Function
CVSS 5.6
CVE-2021-23443 MEDIUM
edge.js < 5.3.2 - Type Confusion via Array Input Bypass
CVSS 5.4
CVE-2021-39219 MEDIUM
Wasmtime < 0.30.0 - Type Confusion via Cross-Engine Linker Usage
CVSS 6.3
CVE-2021-38658 HIGH
Microsoft Office - Remote Code Execution via Type Confusion
CVSS 7.8
CVE-2021-23440 HIGH
set-value < 2.0.1 and 3.0.0-4.0.1 - Type Confusion via Array Path Parameter
CVSS 7.3
CVE-2021-1829 CRITICAL
macOS < 11.3 - Type Confusion to Kernel Code Execution
CVSS 9.8
CVE-2021-30758 HIGH
Apple OSes and Safari - Code Execution via Malicious Web Content
CVSS 8.8
CVE-2021-23438 MEDIUM
mpath < 0.8.4 - Type Confusion via Array IndexOf Bypass
CVSS 5.6
CVE-2021-23436 MEDIUM
immer < 9.0.6 - Type Confusion via Array Path Parameter
CVSS 5.6
CVE-2021-23434 MEDIUM
object-path < 0.11.6 - Type Confusion via Array Path Components
CVSS 5.6
CVE-2021-30599 HIGH
Google Chrome < 92.0.4515.159 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2021-30598 HIGH
Google Chrome < 92.0.4515.159 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2021-31008 HIGH
Safari < 15.1 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2021-30954 HIGH
Apple OSes and Safari - Code Execution via Malicious Web Content
CVSS 7.8
Details
Vulnerabilities 847
Links
MITRE CWE Entry Search this CWE With Exploits