CWE-843: Access of Resource Using Incompatible Type (Type Confusion), page 14

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

What the weakness is: CWE-843 at MITRE

1. 6.7CVE-2023-20616EPSS 0.1%2023-02-06

   In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue …

2. 8.8CVE-2023-0473EPSS 0.7%2023-01-30

   Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

3. 7.5CVE-2022-4205EPSS 0.6%2023-01-27

   In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.

4. 7.8CVE-2022-20461EPSS 0.1%2023-01-26

   In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege of BLE with no additional execution privileges needed. …

5. 5.5CVE-2023-23455EPSS 0.3%2023-01-12

   atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classifi…

6. 5.5CVE-2023-23454EPSS 0.3%2023-01-12

   cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition ra…

7. 7.8CVE-2023-21675EPSS 0.8%2023-01-10

   Windows Kernel Elevation of Privilege Vulnerability

8. 7.8CVE-2022-25721EPSS 0.1%2023-01-09

   Memory corruption in video driver due to type confusion error during video playback

9. 8.8CVE-2022-42856KEVEPSS 8.5%2022-12-15

   A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrar…

10. 7.8CVE-2022-42841EPSS 0.4%2022-12-15

    A type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. Processing a maliciously crafted package may lead to arbitrary code execution.

11. 8.8CVE-2022-4262KEVEPSS 24%2022-12-02

    Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

12. 8.8CVE-2022-4174EPSS 1.0%2022-11-30

    Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

13. 4.6CVE-2022-3903EPSS 0.5%2022-11-14

    An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of…

14. 8.8CVE-2022-3889EPSS 0.8%2022-11-09

    Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

15. 8.8CVE-2022-3723KEVEPSS 7.9%2022-11-01

    Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

16. 8.8CVE-2022-3652EPSS 0.9%2022-11-01

    Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

17. 8.8CVE-2022-42823EPSS 1.8%2022-11-01

    A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code…

18. 8.8CVE-2022-3315EPSS 0.7%2022-11-01

    Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)

19. 7.8CVE-2022-32915EPSS 0.3%2022-11-01

    A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

20. 6.5CVE-2022-3676EPSS 0.8%2022-10-24

    In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.

21. 7.8CVE-2022-41033KEVEPSS 1.9%2022-10-11

    Windows COM+ Event System Service Elevation of Privilege Vulnerability

22. 7.8CVE-2022-32814EPSS 0.3%2022-09-23

    A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

23. 7.5CVE-2022-2971EPSS 1.1%2022-09-23

    MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious p…

24. 6.0CVE-2022-34709EPSS 1.2%2022-08-09

    Windows Defender Credential Guard Security Feature Bypass Vulnerability

25. 6.7CVE-2022-26435EPSS 0.1%2022-08-01

    In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; I…

26. 6.7CVE-2022-26433EPSS 0.1%2022-08-01

    In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138400; I…

27. 6.7CVE-2022-26430EPSS 0.1%2022-08-01

    In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; I…

28. 8.8CVE-2022-2295EPSS 1.5%2022-07-28

    Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

29. 6.5CVE-2022-1869EPSS 1.0%2022-07-27

    Type Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

30. 8.8CVE-2022-1486EPSS 1.0%2022-07-26

    Type confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

31. 8.8CVE-2022-1364KEVEPSS 14%2022-07-26

    Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

32. 8.8CVE-2022-1314EPSS 1.0%2022-07-25

    Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

33. 8.8CVE-2022-1232EPSS 17%2022-07-25

    Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

34. 8.8CVE-2022-1134EPSS 1.9%2022-07-23

    Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

35. 8.8CVE-2022-1096KEVEPSS 25%2022-07-23

    Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

36. 7.8CVE-2022-34221EPSS 11%2022-07-15

    Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitra…

37. 7.8CVE-2022-34918ExploitEPSS 5.5%2022-07-04

    An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (…

38. 7.8CVE-2022-1786EPSS 1.0%2022-06-02

    A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escal…

39. 7.8CVE-2021-26635EPSS 1.2%2022-06-02

    In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow …

40. 7.8CVE-2021-32965EPSS 1.2%2022-05-24

    Delta Electronics DIAScreen versions prior to 1.1.0 are vulnerable to type confusion, which may allow an attacker to remotely execute arbitrary code.

41. 5.5CVE-2022-29209EPSS 0.4%2022-05-21

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the macros that TensorFlow uses for writing assertions (e.g., `CHECK_LT`, `CHECK_GT`, etc.) have an incorrect logic when comparin…

42. 8.2CVE-2022-29181EPSS 3.2%2022-05-20

    Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors…

43. 7.5CVE-2022-30557EPSS 4.6%2022-05-11

    Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaScript execution.

44. 5.3CVE-2021-41041EPSS 1.1%2022-04-27

    In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandl…

45. 8.8CVE-2022-0795EPSS 1.0%2022-04-05

    Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

46. 8.8CVE-2022-0457EPSS 0.8%2022-04-05

    Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

47. 7.5CVE-2022-1176EPSS 1.2%2022-03-31

    Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.

48. 9.1CVE-2021-46743EPSS 0.9%2022-03-29

    In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are loaded in a key ring. This allows an attacker to forge tokens that validate under …

49. 9.8CVE-2021-26600EPSS 5.6%2022-03-28

    ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).

50. 7.8CVE-2022-22661EPSS 1.2%2022-03-18

    A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code with kernel privil…