FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmp_i_connect() passed the first RTMP connect argument to amf0_object_get() without checking whether the AMF value was an object. A string or number in place of an AMF object caused union bytes from the message to be interpreted as node pointers and dereferenced. Any client with network access to an enabled mod_rtmp listener could send the malformed connect command before login; the module is disabled in the stock build and configuration. The invalid read reliably crashes FreeSWITCH and ends every active call, while no write, memory disclosure, or code execution has been demonstrated. This issue is fixed in version 1.11.2.
A type confusion vulnerability exists in CGI versions 4.71 up to but not including 5.00 for Perl. The issue arises because the uploadInfo function dereferences its argument and calls its filename method without verifying that the argument is an upload filehandle. This allows a plain string referencing a global variable to be treated as a symbolic reference, causing the method call to fail and resulting in a denial of service.
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-9921.
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431400; Issue ID: MSV-9922.
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11434319; Issue ID: MSV-9925.
Missing queue-set type validation in the queue-set selection system call in FreeRTOS-Kernel before V11.3.3 on MPU-enabled ports with queue sets enabled allows a local unprivileged task to write actor-controlled data beyond a pointer-sized object on the privileged kernel stack, affecting privileged memory across the MPU isolation boundary.
To remediate this issue, users should upgrade to FreeRTOS-Kernel V11.3.3, rebuild, and reflash affected firmware. Builds that do not enable queue sets are not affected.
CVE-2026-96187 is a type confusion vulnerability in Microsoft Edge (Chromium-based) that allows unauthorized attackers to disclose information over a network. The flaw involves accessing a resource using an incompatible type, leading to potential information leakage. This vulnerability affects versions from 1.0.0.0 up to but not including 155.0.4283.45. An official fix is available in version 155.0.4283.45.
CVE-2026-88090 is a type confusion vulnerability in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to elevate privileges over a network. The flaw involves accessing a resource using an incompatible type, leading to potential privilege escalation. This vulnerability affects versions from 1.0.0.0 up to but not including 154.0.4258.37. A fix has been officially released in version 154.0.4258.37. The vulnerability has a medium severity rating with a CVSS score of 5.4.
A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the wrong data type. In an application that relies on such a check to decide which documents a request may see or act on, a user with basic privileges may be served, may change, or may remove documents that the check was intended to withhold. The failure is silent and produces no error.
CVE-2026-62765 is a type confusion vulnerability in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to execute code remotely over a network. The flaw involves accessing a resource using an incompatible type, leading to potential high-impact consequences including confidentiality, integrity, and availability compromise. This vulnerability affects versions of Microsoft Edge from 1.0.0.0 up to but not including 149.0.4022.62. An official fix is available in version 149.0.4022.62.
CVE-2026-85898 is a type confusion vulnerability in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to execute code remotely. The flaw involves accessing a resource using an incompatible type, which can lead to arbitrary code execution. This vulnerability affects Microsoft Edge versions from 1.0.0.0 up to but not including 154.0.4258.48. A patch has been officially released in version 154.0.4258.48 to address this issue.
CVE-2026-114598 is a high-severity vulnerability in EPICS Base versions up to and including 7.0.10. It involves insufficient validation of element or length values in network messages, which can cause the application to read beyond allocated buffer boundaries. This flaw may lead to denial of service and potential exposure of adjacent memory contents.
CVE-2026-115892 is a type confusion vulnerability in the Wasmtime runtime for WebAssembly. It affects versions from 46.0.0 up to but not including 48.0.7, and from 49.0.0 up to but not including 49.0.4. The flaw occurs when lowering a host-created component-model stream or future into a guest, omitting a required payload-type check after the value passes through guest code. A malicious guest controlling exported function types or returned values can cause the host to pass a type-erased value to a guest expecting a different payload type, resulting in a panic in the Wasmtime host. The issue is fixed in versions 48.0.7 and 49.0.4.
CVE-2026-115889 is a critical numeric truncation error vulnerability in the Cranelift compiler backend used by Wasmtime, a WebAssembly runtime. Versions prior to 36.0.19 and between 37.0.0 and before 43.0.0 are affected. The issue arises from bit-packing SSA value indices that can overflow silently in release builds when compiling large or specially crafted Wasm functions. This overflow can cause incorrect intermediate representation references, leading to arbitrary miscompilation, type confusion, and potentially allowing attacker-controlled effects to escape the Wasm sandbox. The vulnerability is fixed in Wasmtime versions 36.0.19 and 43.0.0.
CVE-2026-108518 is a low-severity type confusion vulnerability in Perl's DBI module versions before 1.656. It occurs in the dbi_profile function when a database handle is destroyed under a Profile Path containing an {attr} element. This leads to a crash (SIGSEGV) due to invalid pointer dereferencing during attribute lookup. The vulnerability can be triggered by setting the Profile Path via application code, the Profile handle attribute, or the DBI_PROFILE environment variable.
CVE-2026-110674 is a type confusion vulnerability in Cpanel::JSON::XS for Perl versions from 4.33 up to but not including 4.80. The flaw arises when decoding JSON with relaxed parsing options that allow bare keys containing non-ASCII bytes, combined with the dupkeys_as_arrayref setting. This causes duplicate keys to bypass duplicate-key checks and leads to improper handling of repeated keys, resulting in type confusion. An attacker can craft malicious JSON input that causes the process to crash or dereference arbitrary memory addresses.
CVE-2026-0314 is a type confusion vulnerability in the Palo Alto Networks GlobalProtect app on Windows. It allows a local user with low privileges to cause a denial of service (DoS) condition. Other platforms such as Linux, macOS, iOS, Android, and Chrome OS are not affected. The vulnerability has a medium severity rating with a CVSS score of 4.3.
CVE-2026-102869 is a type confusion vulnerability in Microsoft .NET Framework versions 3.5, 4.6.2, 4.7, 4.7.1, and 4.7.2. It allows an unauthorized attacker to elevate privileges over a network by accessing resources using incompatible types. The vulnerability has a high severity score of 8.8 and affects multiple specific versions of the .NET Framework. Official patches have been released to address this issue.
CVE-2026-102216 is a type confusion vulnerability in the Windows StateRepository API affecting multiple versions of Microsoft Windows 10. This flaw allows an authorized local attacker to elevate privileges by accessing resources using incompatible types. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-102203 is a type confusion vulnerability in the RPC Runtime component of Microsoft Windows 10 Version 1607 and related builds. It allows an unauthorized attacker to execute code remotely over a network by accessing resources using incompatible types. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. An official fix is available from Microsoft.