#cwe-843

共收录 274 条相关情报。

← 返回所有主题
漏洞预警2026-08-11 发布INFO

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-65807

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-64904

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to exe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-61932

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布HIGH

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields ar...

CVE-2026-72766

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Emai

来源摘录 · NVD

安全公告2026-08-07 发布INFO

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An...

CVE-2026-14644

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain rol...

CVE-2026-14644

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)

CVE-2026-54164

## Summary The API Platform serializer's `AbstractItemNormalizer` does not validate the resource type returned when res

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass t...

CVE-2026-71558

Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The "Allowed Protocol Mapper Types" policy, which restricts which types of data mapp...

CVE-2026-15572

A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The "Allowed Protocol Mappe

历史摘要 · 未重新核验 · NVD

安全公告2026-08-04 发布INFO

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...

CVE-2026-66321

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-04 发布HIGH

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-66321

CVE-2026-66321 是 Microsoft Edge(基于 Chromium 内核)中的一处类型混淆(Type Confusion)漏洞。该漏洞源于程序在处理特定资源时使用了不兼容的数据类型,导致内部状态混乱,攻击者可能利用此问题

历史摘要 · 未重新核验 · NVD

安全公告2026-07-30 发布INFO

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute...

CVE-2026-17989

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-30 发布INFO

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a...

CVE-2026-17948

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malic

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-30 发布INFO

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev...

CVE-2026-17989

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox...

CVE-2026-17948

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca...

CVE-2026-17866

Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev...

CVE-2026-17725

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security sev...

CVE-2026-17697

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandb

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a ...

CVE-2026-17687

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the render

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination.

CVE-2026-64727

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6.

历史摘要 · 未重新核验 · NVD