Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

CVEs (904)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-21357 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Aug 10, 2026 Feb 13, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2024-20012 1Google 1Android Jun 17, 2026 Feb 5, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358566; Issue ID: ALPS08358566.Show less
CVE-2024-20010 1Google 1Android Jun 17, 2026 Feb 5, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358560; Issue ID: ALPS08358560.Show less
CVE-2024-23222 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 Jan 23, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14....Show more A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.Show less
CVE-2024-0518 2Fedoraproject Google 2Chrome Fedora Jun 17, 2026 Jan 16, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-41075 1Apple 3Ipados Iphone OsMacos Jun 17, 2026 Jan 10, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. An app may be abl...Show more A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with kernel privileges.Show less
CVE-2023-41060 1Apple 3Ipados Iphone OsMacos Jun 17, 2026 Jan 10, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. A remote user may be able to cause kernel code execution.
CVE-2024-20662 1Microsoft 6Windows Server 2008 Windows Server 2012Windows Server 2016+3 more Jun 17, 2026 Jan 9, 2024 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability
CVE-2023-6939 1Hihonor 1Magic Ui Jun 17, 2026 Dec 29, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.
CVE-2023-51428 1Hihonor 1Magic Os Jun 17, 2026 Dec 29, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-51427 1Hihonor 1Magic Os Jun 17, 2026 Dec 29, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-51426 1Hihonor 1Magic Os Jun 17, 2026 Dec 29, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-23443 1Hihonor 1Magic Os Jun 17, 2026 Dec 29, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-23442 1Honor 1Magicos Jun 17, 2026 Dec 29, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
CVE-2023-6702 3Fedoraproject GoogleMicrosoft 3Chrome Edge ChromiumFedora Jun 17, 2026 Dec 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-48694 1Eclipse 1Threadx Usbx Jun 17, 2026 Dec 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference and type confusi...Show more Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference and type confusion vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host stack and host class, related to device linked classes, ASIX, Prolific, SWAR, audio, CDC ECM in RTOS v6.2.1 and below. The fixes have been included in USBX release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-6348 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Nov 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security...Show more Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Show less
CVE-2023-41257 1Foxitsoftware 1Foxit Reader Jun 17, 2026 Nov 27, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can le...Show more A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.Show less
CVE-2023-6045 1Openatom 1Openharmony Jun 17, 2026 Nov 20, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion.
CVE-2023-46705 1Openatom 1Openharmony Jun 17, 2026 Nov 20, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion.

Previous 1...222324...46 Next