Skip to content
CVE Tracker

CWE-843: Type confusion

1,045 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 42 of them as exploited in the wild.

All 1,045 in the listAtom feed of new CVEsWhat CWE-843 is, at MITRE (opens in a new tab)
Published CVEs
1,045
Last 12 months
386
Critical
115
Known exploited
42

Critical 115High 690Medium 209Low 29Not scored 2

CVEs per yearBy the year they were published

  1. 201828
  2. 201961
  3. 202074
  4. 20209
  5. 20203
  6. 202158
  7. 202380
  8. 2024100
  9. 2025107
  10. 202550
  11. 2026355
  12. 2026112

Known exploitedNewest addition to KEV first

  • CVE-2026-85046

    Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…

    Google · Chrome

    ExploitedHigh8.8
  • CVE-2026-21519

    Desktop Window Manager Elevation of Privilege Vulnerability

    Microsoft · Windows 10 Version 1607

    ExploitedHigh7.8
  • CVE-2025-13223

    Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…

    Google · Chrome

    ExploitedHigh8.8
  • CVE-2025-10585

    Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…

    Google · Chrome

    ExploitedHigh8.8
  • CVE-2025-6554

    Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium…

    Google · Chrome

    ExploitedHigh8.1
  • CVE-2025-30397

    Scripting Engine Memory Corruption Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh7.5
  • CVE-2024-7971

    Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security…

    Google · Chrome

    ExploitedHigh8.8
  • CVE-2024-38178

    Scripting Engine Memory Corruption Vulnerability

    Microsoft · Windows 11 Version 24H2

    ExploitedHigh7.5
  • CVE-2024-5274

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.…

    Google · Chrome

    ExploitedHigh8.3
  • CVE-2024-4947

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.…

    Google · Chrome

    ExploitedCritical9.6

Newest CVEs

  • CVE-2026-120646

    CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo

    CGI

    Not scored
  • CVE-2026-121218

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…

    Google · Chrome

    High8.8
  • CVE-2026-121221

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…

    Google · Chrome

    High8.8
  • CVE-2026-121078

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…

    Google · Chrome

    High8.8
  • CVE-2026-121137

    Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the…

    Google · Chrome

    High8.8
  • CVE-2026-121068

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…

    Google · Chrome

    High8.8
  • CVE-2026-121226

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…

    Google · Chrome

    High8.8
  • CVE-2026-121094

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…

    Google · Chrome

    High8.8
  • CVE-2026-121057

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…

    Google · Chrome

    High8.8
  • CVE-2026-121210

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…

    Google · Chrome

    High8.8

Vendors it comes up for most

  1. Google238
  2. Microsoft153
  3. Foxit81
  4. Apple67
  5. Mozilla37
  6. Adobe33
  7. MediaTek, Inc.20
  8. Ashlar-Vellum13
  9. OpenHarmony11
  10. Huawei10