CWE-843: Type Confusion vulnerabilities

243 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.7	EPSS 0.5%	CVE-2025-54915Microsoft Windows 10 Version 1507 · Type Confusion Medium6.7EPSS 0.5%2025-09-09CVE Database V5CVE-2025-54915 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. EPSS 0.5%Vulnerability CWE-843	CVE Database V5	2025-09-09
Medium	6.7	EPSS 0.5%	CVE-2025-54109Microsoft Windows 10 Version 1507 · Type Confusion Medium6.7EPSS 0.5%2025-09-09CVE Database V5CVE-2025-54109 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. EPSS 0.5%Vulnerability CWE-843	CVE Database V5	2025-09-09
Medium	6.7	EPSS 0.5%	CVE-2025-54104Microsoft Windows 10 Version 1507 · Type Confusion Medium6.7EPSS 0.5%2025-09-09CVE Database V5CVE-2025-54104 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. EPSS 0.5%Vulnerability CWE-843	CVE Database V5	2025-09-09
Medium	6.7	EPSS 0.5%	CVE-2025-54094Microsoft Windows 10 Version 1507 · Type Confusion Medium6.7EPSS 0.5%2025-09-09CVE Database V5CVE-2025-54094 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. EPSS 0.5%Vulnerability CWE-843	CVE Database V5	2025-09-09
Medium	6.7	EPSS 0.5%	CVE-2025-53810Microsoft Windows 10 Version 1507 · Type Confusion Medium6.7EPSS 0.5%2025-09-09CVE Database V5CVE-2025-53810 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. EPSS 0.5%Vulnerability CWE-843	CVE Database V5	2025-09-09
Medium	6.7	EPSS 0.5%	CVE-2025-53808Microsoft Windows 10 Version 1507 · Type Confusion Medium6.7EPSS 0.5%2025-09-09CVE Database V5CVE-2025-53808 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. EPSS 0.5%Vulnerability CWE-843	CVE Database V5	2025-09-09
High	7.3	EPSS 0.4%	CVE-2025-55236Microsoft Windows 10 Version 1809 · Time-of-check Time-of-use (TOCTOU) Race Condition High7.3EPSS 0.4%2025-09-09CVE Database V5CVE-2025-55236 Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code locally. EPSS 0.4%Vulnerability CWE-367	CVE Database V5	2025-09-09
Critical	9.3	EPSS 0.2%	CVE-2025-26496Salesforce Tableau Server, Tableau Desktop · Type Confusion Critical9.3EPSS 0.2%2025-08-22CVE Database V5CVE-2025-26496 Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux (File Upload modules) allows Local Code Inclusion.This issue affects Tableau Server, Tableau Desktop: before 2025.1.3, before 2024.2.12, before 2023.3.19. EPSS 0.2%Vulnerability CWE-843	CVE Database V5	2025-08-22
High	7.8	EPSS 0.4%	CVE-2025-50155Microsoft Windows 10 Version 1507 · Type Confusion High7.8EPSS 0.4%2025-08-12CVE Database V5CVE-2025-50155 Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. EPSS 0.4%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	7.8	EPSS 0.6%	CVE-2025-53739Microsoft 365 Apps for Enterprise · Type Confusion High7.8EPSS 0.6%2025-08-12CVE Database V5CVE-2025-53739 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. EPSS 0.6%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	7.8	EPSS 0.4%	CVE-2025-53726Microsoft Windows 10 Version 1507 · Type Confusion High7.8EPSS 0.4%2025-08-12CVE Database V5CVE-2025-53726 Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. EPSS 0.4%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	7.8	EPSS 0.4%	CVE-2025-53725Microsoft Windows 10 Version 1507 · Type Confusion High7.8EPSS 0.4%2025-08-12CVE Database V5CVE-2025-53725 Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. EPSS 0.4%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	7.8	EPSS 0.4%	CVE-2025-53724Microsoft Windows 10 Version 1507 · Type Confusion High7.8EPSS 0.4%2025-08-12CVE Database V5CVE-2025-53724 Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. EPSS 0.4%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	8.8	EPSS 8.5%	CVE-2025-53145Microsoft Windows 10 Version 1507 · Type Confusion High8.8EPSS 8.5%2025-08-12CVE Database V5CVE-2025-53145 Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network. EPSS 8.5%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	8.8	EPSS 8.5%	CVE-2025-53144Microsoft Windows 10 Version 1507 · Type Confusion High8.8EPSS 8.5%2025-08-12CVE Database V5CVE-2025-53144 Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network. EPSS 8.5%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	8.8	EPSS 9.0%	CVE-2025-53143Microsoft Windows 10 Version 1507 · Type Confusion High8.8EPSS 9.0%2025-08-12CVE Database V5CVE-2025-53143 Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network. EPSS 9.0%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	7.8	EPSS 0.5%	CVE-2025-50176Microsoft Windows 11 version 22H2 · Type Confusion High7.8EPSS 0.5%2025-08-12CVE Database V5CVE-2025-50176 Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	7.8	EPSS 0.8%	CVE-2025-50168Microsoft Windows 11 version 22H2 · Type Confusion High7.8EPSS 0.8%2025-08-12CVE Database V5CVE-2025-50168 Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. EPSS 0.8%Vulnerability CWE-843	CVE Database V5	2025-08-12
High	7.4	EPSS 0.4%	CVE-2025-55137Latkecrszy LinkJoin · Type Confusion High7.4EPSS 0.4%2025-08-07CVE Database V5CVE-2025-55137 LinkJoin through 882f196 mishandles lacks type checking in password reset. EPSS 0.4%Vulnerability CWE-843	CVE Database V5	2025-08-07
Medium	4.5	EPSS <0.1%	CVE-2025-54649Huawei HarmonyOS · Type Confusion Medium4.5EPSS <0.1%2025-08-06CVE Database V5CVE-2025-54649 Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect. EPSS <0.1%Vulnerability CWE-843	CVE Database V5	2025-08-06

Page 11 of 13