A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cau...

CVE-2026-64704

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS S

历史摘要 · 未重新核验 · NVD

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26....

CVE-2026-64693

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoi

历史摘要 · 未重新核验 · NVD

n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion

## Impact The n8n Send Email node did not enforce that its message fields were strings, so a crafted untrusted non-stri

历史摘要 · 未重新核验 · GitHub Advisory

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data...

CVE-2026-13066

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result i

历史摘要 · 未重新核验 · NVD

Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to...

CVE-2026-16420

Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code

历史摘要 · 未重新核验 · GitHub Advisory

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validat...

CVE-2026-64608

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compa

历史摘要 · 未重新核验 · NVD

Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability

CVE-2026-57108

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the

历史摘要 · 未重新核验 · GitHub Advisory

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote...

CVE-2026-15776

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitra

历史摘要 · 未重新核验 · GitHub Advisory

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromi...

CVE-2026-15776

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitra

历史摘要 · 未重新核验 · NVD

Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally.

CVE-2026-58541

Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate pr

历史摘要 · 未重新核验 · NVD

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-57108

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny servi

来源摘录 · NVD

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55025

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker

历史摘要 · 未重新核验 · NVD

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55024

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker

历史摘要 · 未重新核验 · NVD

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-55022

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to exe

历史摘要 · 未重新核验 · NVD

Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.

CVE-2026-50686

Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute

历史摘要 · 未重新核验 · NVD

Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

CVE-2026-50421

Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows

历史摘要 · 未重新核验 · NVD

Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50390

Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate

历史摘要 · 未重新核验 · NVD

Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally.

CVE-2026-50381

Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized

历史摘要 · 未重新核验 · NVD

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 4.9.0, the EntityIdentifier.equ...

CVE-2026-55771

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi

历史摘要 · 未重新核验 · NVD

CedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilities

CVE-2026-55771

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi

历史摘要 · 未重新核验 · OSV.dev