#cwe-843
共收录 274 条相关情报。
← 返回所有主题 漏洞预警2026-09-29 发布INFO
CVE-2026-95365
Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arb
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95306
Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-95286
Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code i
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-102757
An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,
历史摘要 · 未重新核验 · NVD
安全公告2026-09-29 发布INFO
CVE-2026-102757
An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing,
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-29 发布HIGH
CVE-2026-102556
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong
来源摘录 · NVD
漏洞预警2026-09-29 发布INFO
CVE-2026-18417
The native BSD-socket layer recorded a pending asynchronous socket error by type-punning it into struct net_context's vo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-28 发布INFO
CVE-2026-101912
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSub
历史摘要 · 未重新核验 · NVD
安全公告2026-09-28 发布INFO
CVE-2026-101912
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSub
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-28 发布INFO
CVE-2026-88816
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName.
fetchrow_hashref us
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-28 发布INFO
CVE-2026-88815
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv.
When casting to S
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-28 发布INFO
CVE-2026-85644
XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference.
The wrapper function XS
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-18458
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-22 发布INFO
CVE-2026-11389
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type
历史摘要 · 未重新核验 · NVD
安全公告2026-09-20 发布INFO
CVE-2026-94083
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-20 发布CRITICAL
CVE-2026-94083
CVE-2026-94083 是 Suricata 8.0.7 之前版本中存在的一个类型混淆漏洞,位于 DoH2 协议解析模块。当 Suricata 处理一个 DoH2 请求并伴随 HTTP1 到 HTTP2 的协议升级时,清理代码会错误地
历史摘要 · 未重新核验 · NVD
安全公告2026-09-17 发布INFO
CVE-2026-93377
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-17 发布INFO
CVE-2026-93377
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to
历史摘要 · 未重新核验 · NVD
安全公告2026-09-15 发布INFO
CVE-2026-91731
Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary cod
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-09-15 发布INFO
CVE-2026-91741
Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary co
历史摘要 · 未重新核验 · GitHub Advisory