CWE-843: Type Confusion vulnerabilities

Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-81401 is a type confusion vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized local attacker to disclose sensitive information by accessing resources using incompatible types. The vulnerability has a medium severity rating with a CVSS score of 5.5. Microsoft has released official fixes for affected versions.

CVE-2026-72938 is a type confusion vulnerability in Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to disclose information over a network by accessing a resource using an incompatible type. The issue affects multiple versions prior to fixed releases. Microsoft has issued official fixes for this vulnerability.

CVE-2026-69679 is an out-of-bounds read vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to cause a denial of service on an adjacent network. The vulnerability has a medium severity rating and has been officially fixed in specific Windows builds.

CVE-2026-69637 is an out-of-bounds read vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10 and related Windows versions. This flaw allows an authorized attacker to cause a denial of service on an adjacent network. The vulnerability has been assigned a CVSS v3.1 base score of 5.7, indicating medium severity. Official fixes have been released for all affected versions.

CVE-2026-69324 is a type confusion vulnerability in Windows Performance Monitor on Microsoft Windows 10 Version 1607 and other affected versions. It allows an authorized local attacker to elevate privileges by accessing resources using incompatible types. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.

CVE-2026-69308 is an out-of-bounds read vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to disclose information. The vulnerability has a medium severity score of 5.5 and has been officially fixed by Microsoft in specific updates.

CVE-2026-77889 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related versions involving a type confusion flaw in the Windows DHCP Server. This flaw allows an unauthorized attacker to cause a denial of service over the network by accessing resources using incompatible types. The issue affects multiple Windows versions prior to specific fixed releases. An official fix is available from Microsoft.

CVE-2026-77890 is a type confusion vulnerability in the Windows DHCP Server component affecting multiple Windows versions including Windows 10 Version 1607. This flaw allows an unauthorized attacker to cause a denial of service over a network by accessing resources using incompatible types. The vulnerability has been assigned a high severity with a CVSS score of 7.5. Official patches have been released by Microsoft to address this issue.

CVE-2026-77888 is a type confusion vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows, including Windows 10 Version 1607. This flaw allows an unauthorized attacker to cause a denial of service over a network by accessing resources using incompatible types. The vulnerability has been assigned a high severity rating with a CVSS score of 7.5. Official patches have been released to address this issue in the affected Windows versions.

CVE-2026-77499 is a type confusion vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10 and related Windows versions. This flaw allows an unauthorized attacker to cause a denial of service over a network by accessing resources using incompatible types. The vulnerability has a high severity rating and has been officially fixed in specific Windows builds.

CVE-2026-77494 is a type confusion vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10 and related Windows versions. It allows an unauthorized attacker to cause a denial of service over a network by accessing resources using incompatible types. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific versions.

CVE-2026-70584 is a type confusion vulnerability in Windows Core Messaging on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges by accessing resources using incompatible types. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 versions prior to specific fixed builds. An official fix is available from Microsoft.

CVE-2026-69717 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related versions involving an untrusted pointer dereference in the Windows Group Policy component. This flaw allows an authorized attacker to elevate privileges over a network. The issue affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.

A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the storage engine layer. When documents were subsequently read from the misconfigured collection, the resulting mismatch in expected data format led to corrupted memory interpretation and a server crash. The crafted collection configuration persists across restarts, requiring manual operator intervention to remediate.

CVE-2026-20508 is a type confusion vulnerability in the Power HAL component of MediaTek chipsets. It allows local escalation of privilege if an attacker already has System privilege. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset versions. The CVSS score is 6.7, indicating a medium severity level.

async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header (a GNU longname L, a GNU longlink K, or a PAX x/g header) instead of to the next file entry. POSIX requires a PAX extended-header record set to describe the next file entry, never an intervening extension header. Because poll_next_raw (src/archive.rs) threads the buffered PAX records into the size computation of whatever raw header it reads next — and that header can be an intermediary L — the stream cursor is advanced by an attacker-chosen amount when the L body is consumed. The parser then desyncs relative to a POSIX-correct tar parser (e.g. GNU tar), reading subsequent bytes at the wrong block boundary. This issue has been patched in version 0.6.1.

CVE-2026-72984 is a type confusion vulnerability in Microsoft Edge (Chromium-based) that allows unauthorized attackers to execute code remotely over a network. The flaw arises from accessing resources using incompatible types. It affects versions prior to 152.0.4191.52 and 152.0.4191.53. Microsoft has issued official fixes in these versions. The vulnerability has a high severity score of 8.8 and requires user interaction for exploitation.

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic.