← Back
CWE-843

904 CVEs • Abstraction: Base

Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

JSON object

Loading...

CVEs (904)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit thi...Show more
Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
-
-
Sep 8, 2026
Sep 8, 2026
7.1 HIGH· v4
6.5 MEDIUM· v3
N/A· v2
A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible...Show more
A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the storage engine layer. When documents were subsequently read from the misconfigured collection, the resulting mismatch in expected data format led to corrupted memory interpretation and a server crash. The crafted collection configuration persists across restarts, requiring manual operator intervention to remediate.Show less
-
-
Sep 8, 2026
Sep 7, 2026
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not ne...Show more
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012.Show less
1Google
1Chrome
Sep 8, 2026
Sep 3, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
2Chrome
V8
Sep 8, 2026
Sep 3, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
-
-
Sep 2, 2026
Sep 2, 2026
6.3 MEDIUM· v4
N/A· v3
N/A· v2
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header (a GNU longname L, a GNU longlink K, or a...Show more
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header (a GNU longname L, a GNU longlink K, or a PAX x/g header) instead of to the next file entry. POSIX requires a PAX extended-header record set to describe the next file entry, never an intervening extension header. Because poll_next_raw (src/archive.rs) threads the buffered PAX records into the size computation of whatever raw header it reads next — and that header can be an intermediary L — the stream cursor is advanced by an attacker-chosen amount when the L body is consumed. The parser then desyncs relative to a POSIX-correct tar parser (e.g. GNU tar), reading subsequent bytes at the wrong block boundary. This issue has been patched in version 0.6.1.Show less
1Microsoft
1Edge Chromium
Sep 1, 2026
Aug 28, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.