#cwe-843

共收录 274 条相关情报。

← 返回所有主题
漏洞预警2026-10-19 发布MEDIUM

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv. With allow_barekey,...

CVE-2026-110674

Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion und

来源摘录 · NVD

安全公告2026-10-14 发布INFO

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a...

CVE-2026-0314

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privile

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute...

CVE-2026-110140

Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布HIGH

Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.

CVE-2026-83763

Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to e

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

CVE-2026-83664

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an au

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70245

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-70225

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

CVE-2026-70051

Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to el

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-102869

Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

CVE-2026-102216

Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-102203

Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpe...

CVE-2026-109282

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders,

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders

CVE-2026-109282

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders,

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-12 发布INFO

RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial V2 rt_serial_rx_fifo in _...

CVE-2026-108952

RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that al

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure

CVE-2026-76216

## Summary Vikunja's `web.Auth` interface (`pkg/web/web.go`, single method `GetID() int64`) is satisfied by BOTH `*user.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-09 发布INFO

The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in kernel/device.c, validated its dev argument with K_SYSCALL_OBJ_INIT(dev, K_OBJ_...

CVE-2026-19575

The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in kernel/device.c, valid

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Type confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel code

CVE-2026-19575

The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in kernel/device.c, valid

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-09 发布INFO

A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in...

CVE-2026-107911

A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 all

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-09 发布INFO

A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUE...

CVE-2026-107911

A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 all

历史摘要 · 未重新核验 · NVD

安全公告2026-10-07 发布INFO

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes...

CVE-2026-106587

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but w

历史摘要 · 未重新核验 · GitHub Advisory