CWE-351 · Cryptography
Insufficient Type Distinction
13CVEs
SortMost likely exploited
13 CVEs with CWE-351 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-38831In CISA KEVExploitedRARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may in…RARLAB · WinRAR · CVSS 7.8 · 2023-08-23 | 7.8 | 100% | 2023-08-23 |
| CVE-2020-10134Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacksBluetooth · LE · CVSS 6.3 · 2020-05-19 | 6.3 | 0.7% | 2020-05-19 |
| CVE-2024-4769When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses. This could have be…Mozilla · Firefox · CVSS 5.9 · 2024-05-14 | 5.9 | 0.4% | 2024-05-14 |
| CVE-2025-30510Growatt Cloud portal Insufficient Type DistinctionGrowatt · Cloud portal · CVSS 9.8 · 2025-04-15 | 9.8 | 0.3% | 2025-04-15 |
| CVE-2026-15305TYPO3 CMS - Unrestricted File Upload in Form FrameworkTYPO3 · TYPO3 CMS · CVSS 6.3 · 2026-07-14 | 6.3 | 0.3% | 2026-07-14 |
| CVE-2025-65960Contao is vulnerable to remote code execution in template closurescontao · contao · CVSS 6.6 · 2025-11-25 | 6.6 | 0.2% | 2025-11-25 |
| CVE-2025-32035DNN does not check the contents of a file when uploading filesdnnsoftware · Dnn.Platform · CVSS 2.6 · 2025-04-08 | 2.6 | 0.2% | 2025-04-08 |
| CVE-2025-47939TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction LayerTYPO3 · typo3 · CVSS 5.4 · 2025-05-20 | 5.4 | 0.2% | 2025-05-20 |
| CVE-2025-54413skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load timeskops-dev · skops · CVSS 8.7 · 2025-07-26 | 8.7 | 0.2% | 2025-07-26 |
| CVE-2024-45676IBM Cognos Controller file uploadIBM · Cognos Controller · CVSS 4.3 · 2024-12-03 | 4.3 | 0.2% | 2024-12-03 |
| CVE-2025-54412skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Executionskops-dev · skops · CVSS 8.7 · 2025-07-26 | 8.7 | 0.2% | 2025-07-26 |
| CVE-2023-2866Advantech WebAccess Insufficient Type DistinctionAdvantech · WebAccess/SCADA · CVSS 7.3 · 2023-06-07 | 7.3 | 0.1% | 2023-06-07 |
| CVE-2026-41341OpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord ExtensionOpenClaw · OpenClaw · CVSS 5.4 · 2026-04-23 | 5.4 | 0.1% | 2026-04-23 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.