Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

CVEs (833)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-6554 1Google 1Chrome Jun 17, 2026 Jun 30, 2025 N/A· v4 8.1 HIGH· v3 N/A· v2 Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVE-2025-5959 1Google 1Chrome Jun 17, 2026 Jun 11, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2025-47167 1Microsoft 4365 Apps 365 CopilotOffice+1 more Jun 17, 2026 Jun 10, 2025 N/A· v4 8.4 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-21082 1Openatom 1Openharmony Jun 17, 2026 Jun 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.
CVE-2025-20063 1Openatom 1Openharmony Jun 17, 2026 Jun 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.
CVE-2024-49196 1Samsung 2Exynos 1480 Firmware Exynos 2400 Firmware Jun 17, 2026 May 27, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of Service.
CVE-2025-48756 1Crates 1Scsir Jun 17, 2026 May 24, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for group number.
CVE-2025-30397 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 May 13, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
CVE-2025-30383 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 May 13, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30375 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 May 13, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30310 1Adobe 1Dreamweaver Jun 17, 2026 May 13, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current use...Show more Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-31206 1Apple 7Ipados Iphone OsMacos+4 more Jun 17, 2026 May 12, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing malici...Show more A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.Show less
CVE-2024-58253 - - Jun 17, 2026 May 2, 2025 N/A· v4 2.9 LOW· v3 N/A· v2 In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.
CVE-2025-30445 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Apr 29, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attack...Show more A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination.Show less
CVE-2025-24271 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Apr 29, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An...Show more An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing.Show less
CVE-2025-2197 1Honor 1Baidu Jun 17, 2026 Apr 17, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Browser is affected by type confusion vulnerability, successful exploitation of this vulnerability may affect service availability.
CVE-2025-32948 1Framasoft 1Peertube Jun 17, 2026 Apr 15, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF). Attackers can send ActivityPub activities to PeerTube's "inbox" en...Show more The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF). Attackers can send ActivityPub activities to PeerTube's "inbox" endpoint. By abusing the "Create Activity" functionality, it is possible to create crafted playlists which will cause either denial of service or an attacker-controlled blind SSRF.Show less
CVE-2025-29791 1Microsoft 3365 Apps OfficeOffice Long Term Servicing Channel Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-32352 - - Jun 17, 2026 Apr 5, 2025 N/A· v4 4.8 MEDIUM· v3 N/A· v2 A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpreted as numbers. A sol...Show more A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpreted as numbers. A solution requires moving from MD5 to bcrypt.Show less
CVE-2025-25000 1Microsoft 1Edge Chromium Jun 17, 2026 Apr 4, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Previous 1...111213...42 Next