Browse CVEs

MEDIUM 6.5 CVE-2025-7259 An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This … MongoDB Mitigation only Fix from $1,6002025-07-07 HIGH 8.8 CVE-2025-49713 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over… Edge Chromium 138.0.3351.65+ Fix from $1,9502025-07-02 HIGH 8.1 CVE-2025-6554 KEVEPSS 13% Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chro… Chrome 138.0.7204.92 / 138.0.7204.96+ Fix from $1,9502025-06-30 HIGH 8.8 CVE-2025-5959EPSS 12% Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… Chrome 137.0.7151.103+ Fix from $1,9502025-06-11 HIGH 8.4 CVE-2025-47167 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps 16.0.18925.20000+ Fix from $1,9502025-06-10 MEDIUM 5.5 CVE-2025-21082 in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion. Openharmony after 5.0.3 Fix from $1,6002025-06-08 MEDIUM 5.5 CVE-2025-20063 in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion. Openharmony after 5.0.3 Fix from $1,6002025-06-08 HIGH 7.5 CVE-2024-49196 An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of Service. Exynos 1480 Firmware Mitigation only Fix from $1,9502025-05-27 CRITICAL 9.8 CVE-2025-48756 In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits… Scsir No fix yet Fix from $2,3002025-05-24 HIGH 7.5 CVE-2025-30397 KEVEPSS 27% Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a ne… Windows 10 1507 10.0.10240.21014 / 10.0.14393.8066+ Fix from $1,9502025-05-13 HIGH 7.8 CVE-2025-30383 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20010+ Fix from $1,9502025-05-13 HIGH 7.8 CVE-2025-30310 Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that cou… Dreamweaver 21.5+ Fix from $1,9502025-05-13 HIGH 7.8 CVE-2025-30375 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20010+ Fix from $1,9502025-05-13 MEDIUM 5.4 CVE-2025-24271 An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, … Ipados 2.4 / 13.7.5+ Fix from $1,6002025-04-29 MEDIUM 6.5 CVE-2025-30445 A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS … Ipados 2.4 / 13.7.5+ Fix from $1,6002025-04-29 HIGH 7.5 CVE-2025-32948 The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SS… Peertube 7.1.1+ Fix from $1,9502025-04-15 HIGH 7.8 CVE-2025-29791 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-04-08 HIGH 8.8 CVE-2025-25000 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over… Edge Chromium 135.0.3179.54+ Fix from $1,9502025-04-04 HIGH 7.8 CVE-2025-24213 This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia… Safari 15.4 / 17.7.6+ Fix from $1,9502025-03-31 MEDIUM 6.5 CVE-2025-29806 No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Edge Chromium 129.0.2792.52+ Fix from $1,6002025-03-23 HIGH 7.8 CVE-2025-2018 Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… Cobalt Mitigation only Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-2022 Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… Cobalt Mitigation only Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-2015 Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… Cobalt Mitigation only Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-2016 Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit… Cobalt Mitigation only Fix from $1,9502025-03-11 HIGH 8.8 CVE-2025-1920 Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 134.0.6998.88+ Fix from $1,9502025-03-10 HIGH 8.8 CVE-2025-2135EPSS 7% Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 134.0.6998.88+ Fix from $1,9502025-03-10 HIGH 8.1 CVE-2024-53427 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buf… Jq after 1.7.1 Fix from $1,9502025-02-26 HIGH 7.3 CVE-2024-11344 A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an… Mitigation only Fix from $1,9502025-02-13 HIGH 7.3 CVE-2024-11346 : Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter mo… Mitigation only Fix from $1,9502025-02-13 HIGH 8.8 CVE-2025-21279 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Edge Chromium 133.0.3065.51+ Fix from $1,9502025-02-06