#cwe-843

共收录 274 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布MEDIUM

Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileg...

CVE-2026-119086

Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enable

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-29 发布HIGH

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVE-2026-96187

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-88090

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifi...

CVE-2026-118510

A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the ab

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-27 发布HIGH

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-62765

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-85898

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an all...

CVE-2026-114598

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate...

CVE-2026-112659

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.

CVE-2026-112547

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may b

来源摘录 · NVD

漏洞预警2026-10-26 发布CRITICAL

A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a...

CVE-2026-116370

A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the funct

来源摘录 · NVD

安全公告2026-10-26 发布INFO

A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function...

CVE-2026-116111

A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the componen

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-26 发布CRITICAL

A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type ...

CVE-2026-116111

A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the componen

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stream or future into a guest can omit a required payload-typ...

CVE-2026-115892

Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stre

来源摘录 · NVD

安全公告2026-10-23 发布INFO

Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type

CVE-2026-115892

### Summary Wasmtime may panic when the host lowers a component model `stream` or `future` into a guest, if the host cr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-23 发布INFO

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

CVE-2026-115889

## Summary In Wasmtime prior to v43, the Cranelift compiler backend bit-packs its SSA value indices in a way that can r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-21 发布INFO

Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that...

CVE-2026-114115

Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that reads nested arrays wit

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-20 发布INFO

Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

CVE-2026-113055

Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布LOW

DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element. An {attr} element na...

CVE-2026-108518

DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a P

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing malici...

CVE-2026-86922

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-20 发布INFO

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to une...

CVE-2026-86872

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. P

历史摘要 · 未重新核验 · NVD