CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

791 vulnerabilities with CWE-843
CVE-2018-14249 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via exportDataObject Type Confusion
CVSS 8.8
CVE-2018-14248 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via exportAsXFDF Type Confusion
CVSS 8.8
CVE-2018-14247 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via exportAsFDF Method
CVSS 8.8
CVE-2018-14246 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via convertTocPDF Type Confusion
CVSS 8.8
CVE-2018-14245 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via closeDoc Method Type Confusion
CVSS 8.8
CVE-2018-14244 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via JavaScript calculateNow Type Confusion
CVSS 8.8
CVE-2018-14243 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via addPageOpenJSMessage Type Confusion
CVSS 8.8
CVE-2018-14242 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via addField Method Type Confusion
CVSS 8.8
CVE-2018-14241 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via addAnnot Method Type Confusion
CVSS 8.8
CVE-2018-11623 HIGH
Foxit Reader and PhantomPDF < 9.1.0.5096 - Remote Code Execution via addAdLayer Type Confusion
CVSS 8.8
CVE-2018-8298 HIGH KEV
ChakraCore < 1.10.1 - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-8291 HIGH
Microsoft Browsers - Memory Corruption
CVSS 7.5
CVE-2018-8279 HIGH
Microsoft Edge and ChakraCore - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-8229 HIGH
Microsoft Edge and ChakraCore - Remote Code Execution via Type Confusion
CVSS 7.5
CVE-2018-4920 HIGH
Adobe Flash Player < 28.0.0.161 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2018-10495 HIGH
Foxit Reader and PhantomPDF < 9.0.1.1049 - Remote Code Execution via PDF Parsing Type Confusion
CVSS 8.8
CVE-2018-8133 HIGH
Microsoft Edge and ChakraCore - Remote Code Execution via Type Confusion
CVSS 7.5
CVE-2018-7530 HIGH
Omron CX-One <4.42 - Memory Corruption
CVSS 7.8
CVE-2017-16745 HIGH
Delta Industrial Automation Screen Editor < 2.00.23.00 - Remote Code Execution via Crafted .dpb File
CVSS 7.8
CVE-2017-15860 HIGH
Android - Stack Buffer Overflow via Encrypted Authentication Management Frame Processing
CVSS 7.8
CVE-2017-13220 HIGH
Android - Elevation of Privilege via Upstream Kernel BlueZ Type Confusion
CVSS 7.8
CVE-2017-16582 HIGH
Foxit Reader 8.3.2.25013 - Remote Code Execution via XFA clearItems Type Confusion
CVSS 8.8
CVE-2017-16578 HIGH
Foxit Reader 8.3.2.25013 - Remote Code Execution via XFA Form Picture Element Type Confusion
CVSS 8.8
CVE-2017-16572 HIGH
Foxit Reader 8.3.1.21155 - Remote Code Execution via FormCalc closeDoc Method
CVSS 8.8
CVE-2017-16571 HIGH
Foxit Reader 8.3.1.21155 - Remote Code Execution via FormCalc app Object Reference
CVSS 8.8
Details
Vulnerabilities 791
Links
MITRE CWE Entry Search this CWE With Exploits