Weaknesses of type CWE-843

685 results

Confusão de Tipos

Ocorre quando o programa trata uma variável ou objeto como se fosse de um tipo diferente do seu tipo real, levando a comportamentos impredizíveis. O atacante explora essa interpretação errada para contornar validações, corromper memória ou executar código arbitrário.

Example

Um aplicativo recebe um valor que valida como inteiro, mas a função que o processa o interpreta como um ponteiro de memória. O código tenta acessar e modificar dados no endereço apontado, causando corrupção ou exposição de informações sensíveis.

How to mitigate

Implemente validação rigorosa e conversão explícita de tipos antes de usar qualquer dado externo. Use linguagens com verificação forte de tipos em tempo de compilação e, quando necessário, valide tanto o tipo quanto o intervalo de valores esperados. Testes de fuzzing e análise estática ajudam a detectar confusões de tipo.

CVE-2025-29806MEDIUMMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-26232HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-38219MEDIUMMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-72938MEDIUMMicrosoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.9%CVE-2023-25933CRITICALA type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to EPSS 0.9%CVE-2023-23557CRITICALAn error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a malEPSS 0.9%CVE-2026-10702MEDIUMJIT miscompilation in the JavaScript Engine: JIT componentEPSS 0.9%CVE-2026-77499HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 0.9%CVE-2026-77890HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 0.9%CVE-2026-77889HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 0.9%CVE-2026-77888HIGHWindows DHCP Server Denial of Service VulnerabilityEPSS 0.9%CVE-2022-21731MEDIUMType confusion leading to segfault in TensorflowEPSS 0.9%CVE-2026-64704CRITICALA type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS EPSS 0.8%CVE-2024-1938HIGHType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafteEPSS 0.8%CVE-2023-21675HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2024-9602HIGHType Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a craftEPSS 0.8%CVE-2023-22579CRITICALSequalize - Unsafe fall-through in getWhereConditionsEPSS 0.8%CVE-2026-28983HIGHA type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, maEPSS 0.8%CVE-2026-64608CRITICALApache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip pathsEPSS 0.8%CVE-2024-21363HIGHMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityEPSS 0.8%