Skip to content
BackEsc
Sign in

CWE-704 · weakness in Memory Corruption

Incorrect Type Conversion or Cast

202 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

check available
3
likely to be exploited
8

Every one of the 202 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. RevPi Webstatus <= v2.4.5 - Authentication BypassCVE-2025-41646Kunbus · CVSS 9.8 · 51% likely

    KUNBUS

  2. Netmask NPM Package - Server-Side Request ForgeryCVE-2021-2891815% likely
  3. User Profile Builder 3.16.4 - Unauthenticated Authentication BypassCVE-2026-15826cozmoslabs · CVSS 9.8 · 3.9% likelycovered by CyberSIXT

    Cozmoslabs1 article

  4. Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.CVE-2017-5115Google Chrome prior to 61.0.3163.79 for Windows · 26% likely
  5. Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which th…CVE-2018-1245323% likely
  6. Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code ex…CVE-2017-3106Adobe Systems Incorporated · 22% likely

    Adobe

  7. An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotations. A specially crafted PDF document c…CVE-2018-3843Talos · CVSS 6.5 · 22% likely

    Talos

  8. Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the curren…CVE-2018-5007Adobe Flash Player 30.0.0.113 and earlier versions · 18% likely
  9. Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitati…CVE-2018-12794Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 16% likely
  10. A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed…CVE-2018-12386Mozilla · 14% likely

    Mozilla

  11. Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.CVE-2018-15981Adobe · 12% likely

    Adobe

  12. Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related t…CVE-2017-2962Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.1… · 9.9% likely
  13. Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a c…CVE-2018-6056Google · 9.4% likely

    Google

  14. Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Type Confusion vulnerability. Successful exploitati…CVE-2018-4953Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier… · 9.3% likely
  15. Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitati…CVE-2018-12793Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 9.3% likely
  16. Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitati…CVE-2018-5057Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 9.1% likely
  17. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in…CVE-2017-11221Adobe Systems Incorporated · 8.9% likely

    Adobe

  18. Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions have a Type Confusion vulnerability. Successful exploitati…CVE-2018-12812Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 8.6% likely
  19. Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context…CVE-2018-4944Adobe Flash Player 29.0.0.140 and earlier versions · 8.5% likely
  20. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in…CVE-2017-11257Adobe Systems Incorporated · 8.4% likely

    Adobe

  21. Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK befor…CVE-2015-31207.4% likely
  22. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…CVE-2016-7861Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier · 7.3% likely
  23. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…CVE-2016-7860Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier · 7.3% likely
  24. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…CVE-2016-7865Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier · 7.2% likely
  25. Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a craft…CVE-2018-6064Google · 6.9% likely

    Google

  26. A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and ear…CVE-2016-73986.8% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in