CWE-704 · Memory Corruption
Incorrect Type Conversion or Cast
202CVEs
SortMost likely exploited
202 CVEs with CWE-704 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-41646CheckRevPi Webstatus <= v2.4.5 - Authentication BypassKunbus · Revolution Pi webstatus · CVSS 9.8 · 2025-06-06 | 9.8 | 51% | 2025-06-06 |
| CVE-2021-28918CheckNetmask NPM Package - Server-Side Request ForgeryNetmask Project · Netmask · 2021-04-01 | – | 15% | 2021-04-01 |
| CVE-2026-15826CheckUser Profile Builder 3.16.4 - Unauthenticated Authentication Bypasscozmoslabs · User Profile Builder – Beautiful User Registration Forms, User Profiles & User… · CVSS 9.8 · 2026-08-15 | 9.8 | 3.9% | 2026-08-15 |
| CVE-2017-5115Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.Google · Google Chrome prior to 61.0.3163.79 for Windows · 2017-10-27 | – | 26% | 2017-10-27 |
| CVE-2018-12453Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which th…Redislabs · Redis · 2018-06-16 | – | 23% | 2018-06-16 |
| CVE-2017-3106Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code ex…Adobe Systems Incorporated · Flash Player · 2017-08-11 | – | 22% | 2017-08-11 |
| CVE-2018-3843An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotations. A specially crafted PDF document c…Talos · Foxit · CVSS 6.5 · 2018-04-19 | 6.5 | 22% | 2018-04-19 |
| CVE-2018-5007Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the curren…Adobe · Adobe Flash Player 30.0.0.113 and earlier versions · 2018-07-20 | – | 18% | 2018-07-20 |
| CVE-2018-12794Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 2018-07-20 | – | 16% | 2018-07-20 |
| CVE-2018-12386A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed…Mozilla · Firefox ESR · 2018-10-18 | – | 14% | 2018-10-18 |
| CVE-2018-15981Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.Adobe · Flash Player · 2018-11-29 | – | 12% | 2018-11-29 |
| CVE-2017-2962Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related t…Adobe · Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.1… · 2017-01-11 | – | 9.9% | 2017-01-11 |
| CVE-2018-6056Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a c…Google · Chrome · 2019-01-09 | – | 9.4% | 2019-01-09 |
| CVE-2018-4953Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier… · 2018-07-09 | – | 9.3% | 2018-07-09 |
| CVE-2018-12793Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 2018-07-20 | – | 9.3% | 2018-07-20 |
| CVE-2018-5057Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 2018-07-20 | – | 9.1% | 2018-07-20 |
| CVE-2017-11221Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in…Adobe Systems Incorporated · Acrobat Reader · 2017-08-11 | – | 8.9% | 2017-08-11 |
| CVE-2018-12812Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 2018-07-20 | – | 8.6% | 2018-07-20 |
| CVE-2018-4944Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context…Adobe · Adobe Flash Player 29.0.0.140 and earlier versions · 2018-05-19 | – | 8.5% | 2018-05-19 |
| CVE-2017-11257Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in…Adobe Systems Incorporated · Acrobat Reader · 2017-08-11 | – | 8.4% | 2017-08-11 |
| CVE-2015-3120Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK befor…Adobe · Flash Player · 2015-07-09 | – | 7.4% | 2015-07-09 |
| CVE-2016-7861Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…Adobe · Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier · 2016-11-08 | – | 7.3% | 2016-11-08 |
| CVE-2016-7860Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…Adobe · Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier · 2016-11-08 | – | 7.3% | 2016-11-08 |
| CVE-2016-7865Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…Adobe · Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier · 2016-11-08 | – | 7.2% | 2016-11-08 |
| CVE-2018-6064Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a craft…Google · Chrome · 2018-11-14 | – | 6.9% | 2018-11-14 |
| CVE-2016-7398A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and ear…Php · Ext-Http · 2019-09-06 | – | 6.8% | 2019-09-06 |
| CVE-2018-4945Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the curren…Adobe · Adobe Flash Player 29.0.0.171 and earlier versions · 2018-07-09 | – | 6.7% | 2018-07-09 |
| CVE-2017-16379An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…Adobe · Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and ea… · 2017-12-09 | – | 6.7% | 2017-12-09 |
| CVE-2017-16367An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…Adobe · Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and ea… · 2017-12-09 | – | 6.7% | 2017-12-09 |
| CVE-2016-7979Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initial…Artifex · Ghostscript · 2017-05-23 | – | 6.4% | 2017-05-23 |
| CVE-2015-5219The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a deni…Ntp · Ntp · 2017-07-21 | – | 6.1% | 2017-07-21 |
| CVE-2016-7617An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in…Apple · Mac Os X · 2017-02-20 | – | 5.1% | 2017-02-20 |
| CVE-2017-13855An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The…Apple · Tvos · 2017-12-25 | – | 4.8% | 2017-12-25 |
| CVE-2018-12876Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader · 2018-10-12 | – | 4.8% | 2018-10-12 |
| CVE-2018-12858Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader · 2018-10-12 | – | 4.8% | 2018-10-12 |
| CVE-2020-10735A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,0…Python · python · CVSS 6.2 · 2022-09-09 | 6.2 | 4.5% | 2022-09-09 |
| CVE-2018-12835Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader · 2018-10-12 | – | 4.5% | 2018-10-12 |
| CVE-2018-7407An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to…Foxitsoftware · Phantompdf · 2018-05-24 | – | 3.7% | 2018-05-24 |
| CVE-2016-8602The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via…Artifex · Ghostscript · 2017-04-14 | – | 3.2% | 2017-04-14 |
| CVE-2018-19477psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion.Artifex · Ghostscript · 2018-11-23 | – | 3.0% | 2018-11-23 |
| CVE-2018-19476psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion.Artifex · Ghostscript · 2018-11-23 | – | 3.0% | 2018-11-23 |
| CVE-2018-9943This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17 | – | 3.0% | 2018-05-17 |
| CVE-2018-9942This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17 | – | 3.0% | 2018-05-17 |
| CVE-2018-9941This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17 | – | 3.0% | 2018-05-17 |
| CVE-2018-9940This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17 | – | 3.0% | 2018-05-17 |
| CVE-2018-9939This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17 | – | 3.0% | 2018-05-17 |
| CVE-2018-9938This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17 | – | 3.0% | 2018-05-17 |
| CVE-2018-9937This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17 | – | 3.0% | 2018-05-17 |
| CVE-2018-15910In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or e…Artifex · Ghostscript · 2018-08-27 | – | 3.0% | 2018-08-27 |
| CVE-2018-15909In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpre…Artifex · Ghostscript · 2018-08-27 | – | 3.0% | 2018-08-27 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.