Type Confusion

A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack address information to be disclosed in LDAP responses to authenticated users.

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Microsoft Internet Explorer Type Confusion Vulnerability

Apple Multiple Products WebKit Type Confusion Vulnerability

Apple Multiple Products WebKit Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Microsoft Windows Scripting Engine Type Confusion Vulnerability

Mozilla Firefox And Thunderbird Type Confusion Vulnerability

Apple Multiple Products Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Adobe Flash Player Remote Code Execution Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Apple Multiple Products WebKit Type Confusion Vulnerability

Microsoft Windows Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Adobe Flash Player Type Confusion Vulnerability

Microsoft Windows Scripting Engine Memory Corruption Vulnerability

Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

Apple Multiple Products Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Apple iOS Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Apple Multiple Products Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

ChakraCore Scripting Engine Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted XML file. (Chromium security severity: Medium)

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

The Helpfulcrowd Product Reviews plugin for WordPress is vulnerable to Authorization Bypass via PHP Type Juggling in versions up to, and including, 1.2.9. This is due to the `helpfulcrowd_validate_token()` function using a loose comparison

Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium

A vulnerability was determined in USCiLab Cereal up to 1.3.2. Affected is an unknown function of the component Shared Pointer Handler. Executing a manipulation can lead to type confusion. The attack can be launched remotely. The exploit has

Type Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)