Skip to content
OpenAdvisories

Weakness (CWE)

CWE-843: Access of Resource Using Incompatible Type

Base Incomplete

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Source: MITRE CWE-843

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-115889 Public exploit

    Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

    Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted Wasm function with ma…

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian Ubuntu crates.io
  • Critical 9.0
    CVE-2026-58289 Public exploit

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Critical 9.8
    CVE-2026-33937 Public exploit

    Handlebars.js has JavaScript Injection via AST Type Confusion

    Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-parsed AST object in addition to a template string. The `value` field of a `NumberLiteral` AST node is emitted…

    handlebars-lang handlebars.js handlebars node-handlebars Debian Ubuntu npm
  • Critical 9.8
    CVE-2026-2796 Public exploit

    JIT miscompilation in the JavaScript: WebAssembly component

    JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu
  • Critical 9.8
    CVE-2024-8381 Public exploit

    A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as …

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  • Critical 9.6
    CVE-2024-4947 Exploited Public exploit EPSS 15%

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside…

    Google Chrome chromium Browsers Debian
    KEV May 20, 2024
  • Critical 9.8
    CVE-2019-14537 Public exploit

    Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls

    YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

    yourls/yourls Packagist
  • Critical 9.8
    CVE-2012-0507 Exploited · Ransomware Public exploit EPSS 98%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 U…

    KEV Mar 3, 2022