#cwe-843

共收录 274 条相关情报。

← 返回所有主题
漏洞预警2026-09-29 发布INFO

Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (...

CVE-2026-95365

Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arb

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...

CVE-2026-95306

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu...

CVE-2026-95286

Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU en...

CVE-2026-102757

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

CVE-2026-102757

CVE-2026-102757

An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布HIGH

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal i...

CVE-2026-102556

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong

来源摘录 · NVD

漏洞预警2026-09-29 发布INFO

The native BSD-socket layer recorded a pending asynchronous socket error by type-punning it into struct net_context's void user_data field (ctx->user_data = INT_TO_POINTER(-stat...

CVE-2026-18417

The native BSD-socket layer recorded a pending asynchronous socket error by type-punning it into struct net_context's vo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare m...

CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSub

历史摘要 · 未重新核验 · NVD

安全公告2026-09-28 发布INFO

ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside...

CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSub

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-28 发布INFO

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref uses the string pointer of the FetchHashKeyName attribute a...

CVE-2026-88816

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer ...

CVE-2026-88815

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to S

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a list-associative infix ope...

CVE-2026-85644

XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Co...

CVE-2026-18458

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Co...

CVE-2026-11389

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup...

CVE-2026-94083

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-20 发布CRITICAL

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when ...

CVE-2026-94083

CVE-2026-94083 是 Suricata 8.0.7 之前版本中存在的一个类型混淆漏洞,位于 DoH2 协议解析模块。当 Suricata 处理一个 DoH2 请求并伴随 HTTP1 到 HTTP2 的协议升级时,清理代码会错误地

历史摘要 · 未重新核验 · NVD

安全公告2026-09-17 发布INFO

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging...

CVE-2026-93377

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-17 发布INFO

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted H...

CVE-2026-93377

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to

历史摘要 · 未重新核验 · NVD

安全公告2026-09-15 发布INFO

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...

CVE-2026-91731

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary cod

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-15 发布INFO

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...

CVE-2026-91741

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary co

历史摘要 · 未重新核验 · GitHub Advisory