About CWE-843
MITRE lists these common consequences: Varies by Context, Read Memory, Modify Memory, Execute Unauthorized Code or Commands, DoS: Crash, Exit, or Restart, affecting availability, integrity, confidentiality.
- MITRE name
- Access of Resource Using Incompatible Type
- Abstraction
- Base: abstract, but detailed enough to infer detection and prevention methods
- Status
- Incomplete
Also Known As
- Type Confusion
- Object Type Confusion
CWE-843 in the KEV Catalog
as of 2026-11-11- 42 CISA KEV entries name Type Confusion (CWE-843) in their CVE record, ranking 11th among the 194 weaknesses named in the catalog.
- CISA added 6 CWE-843 entries to the KEV catalog in 2024, 4 in 2025, and 2 so far in 2026.
- Google has the most CWE-843 entries in the CISA KEV catalog (20), followed by Apple (8) and Microsoft (8).
- For CWE-843 entries added to the CISA KEV catalog since 2023, the median time from CVE publication to KEV listing is 1 days, compared with 15 days for all entries added in that period.
- CISA marks 5% of CWE-843 KEV entries (2 of 42) as known to be used in ransomware campaigns, compared with 20% of all KEV entries.
- CISA's SSVC enrichment rates 2% of CWE-843 KEV entries with SSVC data (1 of 42) as automatable, compared with 41% across the catalog.
CWE-843 Vulnerabilities
42 CVEs| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2026-85046KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 1.8% | KEV | 2026-09-03 | |
| CVE-2026-21519KEV Desktop Window Manager Elevation of Privilege Vulnerability | Desktop Window Manager Elevation of Privilege Vulnerability | Microsoft | 7.8 | 2.6% | KEV | 2026-02-10 |
| CVE-2025-13223KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 4.9% | KEV | 2025-11-17 | |
| CVE-2025-10585KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 9.0% | KEV | 2025-09-24 | |
| CVE-2025-6554KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.1 | 14.1% | KEV | 2025-06-30 | |
| CVE-2025-30397KEV Scripting Engine Memory Corruption Vulnerability | Scripting Engine Memory Corruption Vulnerability | Microsoft | 7.5 | 27.3% | KEV | 2025-05-13 |
| CVE-2024-7971KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 21.0% | KEV | 2024-08-21 | |
| CVE-2024-38178KEV Scripting Engine Memory Corruption Vulnerability | Scripting Engine Memory Corruption Vulnerability | Microsoft | 7.5 | 41.4% | KEV | 2024-08-13 |
| CVE-2024-5274KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.3 | 7.7% | KEV | 2024-05-28 | |
| CVE-2024-4947KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 9.6 | 15.2% | KEV | 2024-05-15 | |
| CVE-2023-4762KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 41.4% | KEV | 2023-09-05 | |
| CVE-2024-23222KEV Apple Multiple Products WebKit Type Confusion Vulnerability | Apple Multiple Products WebKit Type Confusion Vulnerability | Apple | 8.8 | 10.6% | KEV | 2024-01-23 |
| CVE-2023-32439KEV Apple Multiple Products WebKit Type Confusion Vulnerability | Apple Multiple Products WebKit Type Confusion Vulnerability | Apple | 8.8 | 24.0% | KEV | 2023-06-23 |
| CVE-2023-3079KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 37.9% | KEV | 2023-06-05 | |
| CVE-2023-2033KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 40.6% | KEV | 2023-04-14 | |
| CVE-2023-23529KEV Apple Multiple Products WebKit Type Confusion Vulnerability | Apple Multiple Products WebKit Type Confusion Vulnerability | Apple | 8.8 | 9.4% | KEV | 2023-02-27 |
| CVE-2022-42856KEV Apple iOS Type Confusion Vulnerability | Apple iOS Type Confusion Vulnerability | Apple | 8.8 | 8.5% | KEV | 2022-12-15 |
| CVE-2022-4262KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 23.5% | KEV | 2022-12-02 | |
| CVE-2022-3723KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 7.9% | KEV | 2022-11-01 | |
| CVE-2022-41033KEV Windows COM+ Event System Service Elevation of Privilege Vulnerability | Windows COM+ Event System Service Elevation of Privilege Vulnerability | Microsoft | 7.8 | 1.9% | KEV | 2022-10-11 |
| CVE-2017-5070KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | - | 8.8 | 32.1% | KEV | 2017-10-27 |
| CVE-2017-8291KEV Artifex Ghostscript Type Confusion Vulnerability | Artifex Ghostscript Type Confusion Vulnerability | - | 7.8 | 97.0% | KEV | 2017-04-27 |
| CVE-2019-11707KEV Mozilla Firefox and Thunderbird Type Confusion Vulnerability | Mozilla Firefox and Thunderbird Type Confusion Vulnerability | Mozilla | 8.8 | 38.0% | KEV | 2019-07-23 |
| CVE-2019-8506KEV Apple Multiple Products Type Confusion Vulnerability | Apple Multiple Products Type Confusion Vulnerability | Apple | 8.8 | 16.2% | KEV | 2019-12-18 |
| CVE-2021-1789KEV Apple Multiple Products Type Confusion Vulnerability | Apple Multiple Products Type Confusion Vulnerability | Apple | 8.8 | 14.0% | KEV | 2021-04-02 |
| CVE-2022-1364KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 13.9% | KEV | 2022-07-26 | |
| CVE-2017-0037KEV Microsoft Edge and Internet Explorer Type Confusion Vulnerability | Microsoft Edge and Internet Explorer Type Confusion Vulnerability | Microsoft Corporation | 8.1 | 80.4% | KEV | 2017-02-26 |
| CVE-2016-7201KEV Microsoft Edge Memory Corruption Vulnerability | Microsoft Edge Memory Corruption Vulnerability | - | 8.8 | 80.0% | KEV | 2016-11-10 |
| CVE-2022-1096KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 24.7% | KEV | 2022-07-22 | |
| CVE-2011-0611KEV Adobe Flash Player Remote Code Execution Vulnerability | Adobe Flash Player Remote Code Execution Vulnerability | - | 8.8 | 99.4% | KEV | 2011-04-13 |
| CVE-2012-0507KEV Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | - | 9.8 | 98.2% | KEV | 2012-06-07 |
| CVE-2018-8298KEV ChakraCore Scripting Engine Type Confusion Vulnerability | ChakraCore Scripting Engine Type Confusion Vulnerability | Microsoft | 7.5 | 74.7% | KEV | 2018-07-11 |
| CVE-2017-11292KEV Adobe Flash Player Type Confusion Vulnerability | Adobe Flash Player Type Confusion Vulnerability | - | 8.8 | 11.2% | KEV | 2017-10-21 |
| CVE-2019-0752KEV Microsoft Internet Explorer Type Confusion Vulnerability | Microsoft Internet Explorer Type Confusion Vulnerability | Microsoft | 7.5 | 81.7% | KEV | 2019-04-09 |
| CVE-2021-21224KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 84.2% | KEV | 2021-04-26 | |
| CVE-2020-6418KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 78.8% | KEV | 2020-02-27 | |
| CVE-2021-30551KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 64.7% | KEV | 2021-06-15 | |
| CVE-2020-16009KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 48.3% | KEV | 2020-11-03 | |
| CVE-2019-17026KEV Mozilla Firefox And Thunderbird Type Confusion Vulnerability | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | Mozilla | 8.8 | 46.3% | KEV | 2020-03-02 |
| CVE-2020-27932KEV Apple Multiple Products Type Confusion Vulnerability | Apple Multiple Products Type Confusion Vulnerability | Apple | 7.8 | 10.3% | KEV | 2020-12-08 |
| CVE-2021-30563KEV Google Chromium V8 Type Confusion Vulnerability | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 9.0% | KEV | 2021-08-03 | |
| CVE-2021-30869KEV Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | Apple | 7.8 | 4.2% | KEV | 2021-08-24 |
Frequently Asked Questions
What is CWE-843?→
CWE-843 (Access of Resource Using Incompatible Type) is a MITRE CWE entry. The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
How many exploited vulnerabilities are classified as CWE-843?→
This database lists 42 CVE records mapped to CWE-843 by their CVE Numbering Authority. 42 of them are in the CISA Known Exploited Vulnerabilities catalog, and CISA links 2 to known ransomware campaigns. Examples include CVE-2026-85046, CVE-2026-21519, CVE-2025-13223.
How quickly are CWE-843 vulnerabilities added to the KEV catalog?→
For CWE-843 entries added to the CISA KEV catalog since 2023, the median time from CVE publication to KEV listing is 1 days, compared with 15 days for all entries added in that period. These figures are as of November 11, 2026.
Weakness description, consequences, and mitigations from the CWE List, © The MITRE Corporation, used under the CWE Terms of Use. CWE mappings come from each CVE record's CNA. Exploited-in-the-wild data from the CISA KEV catalog (CC0). This site is not affiliated with or endorsed by MITRE or CISA.