← Back
CWE-843

833 CVEs • Abstraction: Base

Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

JSON object

Loading...

CVEs (833)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-3723
1Google
1Chrome
Jun 17, 2026
Nov 1, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2022-3652
1Google
1Chrome
Jun 17, 2026
Nov 1, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2022-42823
3Apple
DebianFedoraproject
8Debian Linux
FedoraIpados+5 more
Jun 17, 2026
Nov 1, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lea...Show more
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2022-3315
1Google
1Chrome
Jun 17, 2026
Nov 1, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
CVE-2022-32915
1Apple
1Macos
Jun 17, 2026
Nov 1, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
CVE-2022-3676
1Eclipse
1Openj9
Jun 17, 2026
Oct 24, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
CVE-2022-41033
1Microsoft
16Windows 10 1507
Windows 10 1607Windows 10 1809+13 more
Jun 17, 2026
Oct 11, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-32814
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Sep 23, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel pr...Show more
A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-2971
1Mz Automation
1Libiec61850
Jun 17, 2026
Sep 23, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an attacker to crash the server...Show more
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload.Show less
CVE-2022-34709
1Microsoft
5Windows 10
Windows 11Windows Server 2016+2 more
Jun 17, 2026
Aug 9, 2022
N/A· v4
6.0 MEDIUM· v3
N/A· v2
Windows Defender Credential Guard Security Feature Bypass Vulnerability
CVE-2022-26435
2Google
Yoctoproject
2Android
Yocto
Jun 17, 2026
Aug 1, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; Issue ID: ALPS07138435.Show less
CVE-2022-26433
2Google
Yoctoproject
2Android
Yocto
Jun 17, 2026
Aug 1, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138400; Issue ID: ALPS07138400.Show less
CVE-2022-26430
2Google
Yoctoproject
2Android
Yocto
Jun 17, 2026
Aug 1, 2022
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch...Show more
In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; Issue ID: ALPS07032521.Show less
CVE-2022-2295
2Fedoraproject
Google
3Chrome
Extra Packages For Enterprise LinuxFedora
Jun 17, 2026
Jul 28, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-1869
1Google
1Chrome
Jun 17, 2026
Jul 27, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Type Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-1486
1Google
1Chrome
Jun 17, 2026
Jul 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVE-2022-1364
1Google
1Chrome
Jun 17, 2026
Jul 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-1314
1Google
1Chrome
Jun 17, 2026
Jul 25, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-1232
1Google
1Chrome
Jun 17, 2026
Jul 25, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-1134
1Google
1Chrome
Jun 17, 2026
Jul 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.