ByteOS

Product:Flash Player

Added At:03 Mar, 2022

Due At:24 Mar, 2022

Adobe Flash Player Remote Code Execution Vulnerability

Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.

Used in Ransomware

Unknown

CWE

CWE-843

Required Action:

The impacted product is end-of-life and should be disconnected if still in use.

Additional Notes:

https://nvd.nist.gov/vuln/detail/CVE-2011-0611

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:adobe

Assigner Org ID:078d4453-3bcd-4900-85e6-15281da43538

Published At:13 Apr, 2011 | 14:00

Updated At:22 Oct, 2025 | 00:05

▼CVE Numbering Authority (CNA)

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html	x_refsource_MISC
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175	vdb-entry signature x_refsource_OVAL
http://www.securityfocus.com/bid/47314	vdb-entry x_refsource_BID
http://secunia.com/blog/210/	x_refsource_MISC
http://securityreason.com/securityalert/8204	third-party-advisory x_refsource_SREASON
http://www.vupen.com/english/advisories/2011/0922	vdb-entry x_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2011-0451.html	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html	vendor-advisory x_refsource_SUSE
http://www.adobe.com/support/security/bulletins/apsb11-07.html	x_refsource_CONFIRM
http://securityreason.com/securityalert/8292	third-party-advisory x_refsource_SREASON
http://secunia.com/advisories/44149	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/44141	third-party-advisory x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681	vdb-entry x_refsource_XF
http://www.vupen.com/english/advisories/2011/0924	vdb-entry x_refsource_VUPEN
http://www.securitytracker.com/id?1025325	vdb-entry x_refsource_SECTRACK
http://www.exploit-db.com/exploits/17175	exploit x_refsource_EXPLOIT-DB
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx	x_refsource_MISC
http://secunia.com/advisories/44119	third-party-advisory x_refsource_SECUNIA
http://www.kb.cert.org/vuls/id/230057	third-party-advisory x_refsource_CERT-VN
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html	x_refsource_MISC
http://www.vupen.com/english/advisories/2011/0923	vdb-entry x_refsource_VUPEN
http://www.adobe.com/support/security/advisories/apsa11-02.html	x_refsource_CONFIRM
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html	x_refsource_CONFIRM
http://www.adobe.com/support/security/bulletins/apsb11-08.html	x_refsource_CONFIRM
http://www.securitytracker.com/id?1025324	vdb-entry x_refsource_SECTRACK

Hyperlink: http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html

Resource:

x_refsource_MISC

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.securityfocus.com/bid/47314

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://secunia.com/blog/210/

Resource:

x_refsource_MISC

Hyperlink: http://securityreason.com/securityalert/8204

Resource:

third-party-advisory

x_refsource_SREASON

Hyperlink: http://www.vupen.com/english/advisories/2011/0922

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0451.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-07.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://securityreason.com/securityalert/8292

Resource:

third-party-advisory

x_refsource_SREASON

Resource:

third-party-advisory

x_refsource_SECUNIA

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/66681

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.vupen.com/english/advisories/2011/0924

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securitytracker.com/id?1025325

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.exploit-db.com/exploits/17175

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx

Resource:

x_refsource_MISC

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.kb.cert.org/vuls/id/230057

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html

Resource:

x_refsource_MISC

Hyperlink: http://www.vupen.com/english/advisories/2011/0923

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.adobe.com/support/security/advisories/apsa11-02.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-08.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id?1025324

Resource:

vdb-entry

x_refsource_SECTRACK

▼Authorized Data Publishers (ADP)

1. CISA ADP Vulnrichment

Affected Products

Vendor

Product

flash_player

CPEs

cpe:2.3:a:adobe:flash_player:-:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 10.2.154.27 (custom)

Vendor

Product

air

CPEs

cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 2.6.19140 (custom)

Vendor

Product

reader

CPEs

cpe:2.3:a:adobe:reader:9.0:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 9.0 before 9.4.4 (custom)

Vendor

Product

reader

CPEs

cpe:2.3:a:adobe:reader:10.0:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 10.0 before 10.0.3 (custom)

Vendor

Product

acrobat

CPEs

cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 10.0 before 10.0.3 (custom)

Vendor

Product

acrobat

CPEs

cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 9.0 before 9.4.4 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-843	CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Type: CWE

CWE ID: CWE-843

Description: CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-03-03

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0611

Timeline

Event	Date
CVE-2011-0611 added to CISA KEV	2022-03-03 00:00:00

Event: CVE-2011-0611 added to CISA KEV

Date: 2022-03-03 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0611	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0611

Resource:

government-resource

2. CVE Program Container

References

Hyperlink	Resource
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html	x_refsource_MISC x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175	vdb-entry signature x_refsource_OVAL x_transferred
http://www.securityfocus.com/bid/47314	vdb-entry x_refsource_BID x_transferred
http://secunia.com/blog/210/	x_refsource_MISC x_transferred
http://securityreason.com/securityalert/8204	third-party-advisory x_refsource_SREASON x_transferred
http://www.vupen.com/english/advisories/2011/0922	vdb-entry x_refsource_VUPEN x_transferred
http://www.redhat.com/support/errata/RHSA-2011-0451.html	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.adobe.com/support/security/bulletins/apsb11-07.html	x_refsource_CONFIRM x_transferred
http://securityreason.com/securityalert/8292	third-party-advisory x_refsource_SREASON x_transferred
http://secunia.com/advisories/44149	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/44141	third-party-advisory x_refsource_SECUNIA x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681	vdb-entry x_refsource_XF x_transferred
http://www.vupen.com/english/advisories/2011/0924	vdb-entry x_refsource_VUPEN x_transferred
http://www.securitytracker.com/id?1025325	vdb-entry x_refsource_SECTRACK x_transferred
http://www.exploit-db.com/exploits/17175	exploit x_refsource_EXPLOIT-DB x_transferred
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx	x_refsource_MISC x_transferred
http://secunia.com/advisories/44119	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.kb.cert.org/vuls/id/230057	third-party-advisory x_refsource_CERT-VN x_transferred
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html	x_refsource_MISC x_transferred
http://www.vupen.com/english/advisories/2011/0923	vdb-entry x_refsource_VUPEN x_transferred
http://www.adobe.com/support/security/advisories/apsa11-02.html	x_refsource_CONFIRM x_transferred
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html	x_refsource_CONFIRM x_transferred
http://www.adobe.com/support/security/bulletins/apsb11-08.html	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id?1025324	vdb-entry x_refsource_SECTRACK x_transferred

Hyperlink: http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.securityfocus.com/bid/47314

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://secunia.com/blog/210/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://securityreason.com/securityalert/8204

Resource:

third-party-advisory

x_refsource_SREASON

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0922

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0451.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-07.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://securityreason.com/securityalert/8292

Resource:

third-party-advisory

x_refsource_SREASON

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/66681

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0924

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securitytracker.com/id?1025325

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.exploit-db.com/exploits/17175

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx

Resource:

x_refsource_MISC

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/230057

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0923

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.adobe.com/support/security/advisories/apsa11-02.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-08.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securitytracker.com/id?1025324

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:13 Apr, 2011 | 14:55

Updated At:21 Apr, 2026 | 20:30

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-03-03	2022-03-24	Adobe Flash Player Remote Code Execution Vulnerability	The impacted product is end-of-life and should be disconnected if still in use.

Date Added: 2022-03-03

Due Date: 2022-03-24

Vulnerability Name: Adobe Flash Player Remote Code Execution Vulnerability

Required Action: The impacted product is end-of-life and should be disconnected if still in use.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

>>flash_player>>Versions before 10.2.154.27(exclusive)

>>mac_os_x>>-

Linux Kernel Organization, Inc

>>linux_kernel>>-

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

>>windows>>-

cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*

Oracle Corporation

>>solaris>>-

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

>>flash_player>>Versions up to 10.2.156.12(inclusive)

Google LLC

>>android>>-

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

>>acrobat_reader>>Versions from 9.0(inclusive) to 9.4.4(exclusive)

>>acrobat_reader>>Versions from 10.0(inclusive) to 10.0.1(inclusive)

>>windows>>-

cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*

>>adobe_air>>Versions before 2.6.19140(exclusive)

>>acrobat_reader>>Versions from 9.0(inclusive) to 9.4.4(exclusive)

>>acrobat_reader>>Versions from 10.0(inclusive) to 10.0.3(exclusive)

>>mac_os_x>>-

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*

>>acrobat>>Versions from 9.0(inclusive) to 9.4(exclusive)

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*

>>acrobat>>Versions from 10.0(inclusive) to 10.0.3(exclusive)

>>mac_os_x>>-

>>windows>>-

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Google LLC

>>chrome>>Versions before 10.0.648.205(exclusive)

>>mac_os_x>>-

cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*

Google LLC

>>chrome_os>>-

Linux Kernel Organization, Inc

>>linux_kernel>>-

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

>>windows>>-

cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*

openSUSE

>>opensuse>>11.2

openSUSE

>>opensuse>>11.3

cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*

openSUSE

>>opensuse>>11.4

cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

SUSE

>>linux_enterprise_desktop>>10

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*

SUSE

>>linux_enterprise_desktop>>11

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-843	Primary	nvd@nist.gov
CWE-843	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-843

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-843

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx	psirt@adobe.com	Not Applicable
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html	psirt@adobe.com	Exploit
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html	psirt@adobe.com	Exploit Issue Tracking
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html	psirt@adobe.com	Release Notes
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html	psirt@adobe.com	Mailing List Patch
http://secunia.com/advisories/44119	psirt@adobe.com	Broken Link Vendor Advisory
http://secunia.com/advisories/44141	psirt@adobe.com	Broken Link Vendor Advisory
http://secunia.com/advisories/44149	psirt@adobe.com	Broken Link Vendor Advisory
http://secunia.com/blog/210/	psirt@adobe.com	Broken Link Vendor Advisory
http://securityreason.com/securityalert/8204	psirt@adobe.com	Third Party Advisory
http://securityreason.com/securityalert/8292	psirt@adobe.com	Third Party Advisory
http://www.adobe.com/support/security/advisories/apsa11-02.html	psirt@adobe.com	Broken Link Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb11-07.html	psirt@adobe.com	Broken Link Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb11-08.html	psirt@adobe.com	Broken Link Vendor Advisory
http://www.exploit-db.com/exploits/17175	psirt@adobe.com	Exploit Third Party Advisory VDB Entry
http://www.kb.cert.org/vuls/id/230057	psirt@adobe.com	Broken Link Third Party Advisory US Government Resource
http://www.redhat.com/support/errata/RHSA-2011-0451.html	psirt@adobe.com	Broken Link Vendor Advisory
http://www.securityfocus.com/bid/47314	psirt@adobe.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1025324	psirt@adobe.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1025325	psirt@adobe.com	Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2011/0922	psirt@adobe.com	Broken Link Vendor Advisory
http://www.vupen.com/english/advisories/2011/0923	psirt@adobe.com	Broken Link Vendor Advisory
http://www.vupen.com/english/advisories/2011/0924	psirt@adobe.com	Broken Link Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681	psirt@adobe.com	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175	psirt@adobe.com	Broken Link
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx	af854a3a-2127-422b-91ae-364da2661108	Not Applicable
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html	af854a3a-2127-422b-91ae-364da2661108	Exploit Issue Tracking
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html	af854a3a-2127-422b-91ae-364da2661108	Release Notes
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Patch
http://secunia.com/advisories/44119	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://secunia.com/advisories/44141	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://secunia.com/advisories/44149	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://secunia.com/blog/210/	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://securityreason.com/securityalert/8204	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://securityreason.com/securityalert/8292	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.adobe.com/support/security/advisories/apsa11-02.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb11-07.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb11-08.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://www.exploit-db.com/exploits/17175	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry
http://www.kb.cert.org/vuls/id/230057	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory US Government Resource
http://www.redhat.com/support/errata/RHSA-2011-0451.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://www.securityfocus.com/bid/47314	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1025324	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1025325	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2011/0922	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://www.vupen.com/english/advisories/2011/0923	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
http://www.vupen.com/english/advisories/2011/0924	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175	af854a3a-2127-422b-91ae-364da2661108	Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0611	134c704f-9b21-4f2e-91b3-4a467353bcc0	US Government Resource

Hyperlink: http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx

Source: psirt@adobe.com

Resource:

Not Applicable

Hyperlink: http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html

Source: psirt@adobe.com

Resource:

Exploit

Hyperlink: http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html

Source: psirt@adobe.com

Resource:

Exploit

Issue Tracking

Hyperlink: http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html

Source: psirt@adobe.com

Resource:

Release Notes

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html

Source: psirt@adobe.com

Resource:

Mailing List

Patch

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://secunia.com/blog/210/

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://securityreason.com/securityalert/8204

Source: psirt@adobe.com

Resource:

Third Party Advisory

Hyperlink: http://securityreason.com/securityalert/8292

Source: psirt@adobe.com

Resource:

Third Party Advisory

Hyperlink: http://www.adobe.com/support/security/advisories/apsa11-02.html

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-07.html

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-08.html

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.exploit-db.com/exploits/17175

Source: psirt@adobe.com

Resource:

Exploit

Third Party Advisory

VDB Entry

Hyperlink: http://www.kb.cert.org/vuls/id/230057

Source: psirt@adobe.com

Resource:

Broken Link

Third Party Advisory

US Government Resource

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0451.html

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/47314

Source: psirt@adobe.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1025324

Source: psirt@adobe.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1025325

Source: psirt@adobe.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.vupen.com/english/advisories/2011/0922

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2011/0923

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2011/0924

Source: psirt@adobe.com

Resource:

Broken Link

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/66681

Source: psirt@adobe.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175

Source: psirt@adobe.com

Resource:

Broken Link

Hyperlink: http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Not Applicable

Hyperlink: http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Issue Tracking

Hyperlink: http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Release Notes

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Patch

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://secunia.com/blog/210/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://securityreason.com/securityalert/8204

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://securityreason.com/securityalert/8292

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.adobe.com/support/security/advisories/apsa11-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-07.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-08.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.exploit-db.com/exploits/17175

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Third Party Advisory

VDB Entry

Hyperlink: http://www.kb.cert.org/vuls/id/230057

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

US Government Resource

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0451.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/47314

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1025324

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1025325

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.vupen.com/english/advisories/2011/0922

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2011/0923

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2011/0924

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/66681

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0611

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource:

US Government Resource

Similar CVEs

8500Records found

CVE-2026-6301

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.37% / 28.90%

7 Day CHG~0.00%

Published-15 Apr, 2026 | 19:04

Updated-26 May, 2026 | 19:16

Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Linux Kernel Organization, Inc Google LLC Apple Inc.

Product-linux_kernel windows macos chrome Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-4061

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.39% / 68.72%

7 Day CHG~0.00%

Published-23 Dec, 2021 | 00:45

Updated-03 Aug, 2024 | 17:16

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-4078

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.96% / 56.95%

7 Day CHG~0.00%

Published-23 Dec, 2021 | 00:45

Updated-03 Aug, 2024 | 17:16

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC Debian GNU/Linux

Product-chrome debian_linux Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-4056

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.39% / 68.72%

7 Day CHG~0.00%

Published-23 Dec, 2021 | 00:45

Updated-03 Aug, 2024 | 17:16

Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2017-15860

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.39% / 30.35%

7 Day CHG~0.00%

Published-23 Feb, 2018 | 23:00

Updated-16 Sep, 2024 | 19:20

In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-38007

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.91% / 55.36%

7 Day CHG~0.00%

Published-23 Dec, 2021 | 00:05

Updated-04 Aug, 2024 | 01:30

Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-38001

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-26.70% / 97.76%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 21:30

Updated-04 Aug, 2024 | 01:30

Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2025-8010

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.25% / 16.03%

7 Day CHG+0.01%

Published-22 Jul, 2025 | 21:11

Updated-26 Feb, 2026 | 17:50

Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Linux Kernel Organization, Inc Google LLC Microsoft Corporation

Product-chrome linux_kernel macos windows Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30513

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-2.00% / 78.17%

7 Day CHG~0.00%

Published-04 Jun, 2021 | 17:15

Updated-03 Aug, 2024 | 22:32

Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Product-chrome fedora Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30758

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.58% / 72.34%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:46

Updated-03 Aug, 2024 | 22:40

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos safari macos macOS iOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30818

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.52% / 71.26%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 18:17

Updated-03 Aug, 2024 | 22:48

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari macos tvOS Safari watchOS iOS and iPadOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30563

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-8.93% / 94.56%

7 Day CHG~0.00%

Published-03 Aug, 2021 | 18:25

Updated-24 Oct, 2025 | 21:04

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC

Product-chrome Chrome Chromium V8

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30627

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.88% / 54.29%

7 Day CHG~0.00%

Published-08 Oct, 2021 | 20:50

Updated-03 Aug, 2024 | 22:40

Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Product-chrome fedora Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30551

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-64.70% / 99.14%

7 Day CHG~0.00%

Published-15 Jun, 2021 | 21:40

Updated-24 Oct, 2025 | 21:07

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Product-fedora chrome Chrome Chromium V8

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30859

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.15% / 62.81%

7 Day CHG+0.04%

Published-24 Aug, 2021 | 18:49

Updated-03 Aug, 2024 | 22:48

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30599

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-5.42% / 91.66%

7 Day CHG-0.12%

Published-26 Aug, 2021 | 17:40

Updated-03 Aug, 2024 | 22:40

Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Product-chrome fedora Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2024-5838

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.52% / 39.88%

7 Day CHG~0.00%

Published-11 Jun, 2024 | 20:58

Updated-13 Feb, 2025 | 17:54

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Product-chrome fedora Chrome chrome fedora

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-21230

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.60% / 72.65%

7 Day CHG~0.00%

Published-30 Apr, 2021 | 20:15

Updated-03 Aug, 2024 | 18:09

Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-21224

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-57.74% / 98.96%

7 Day CHG~0.00%

Published-26 Apr, 2021 | 16:56

Updated-24 Oct, 2025 | 21:08

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Product-fedora debian_linux chrome Chrome Chromium V8

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-1789

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-14.54% / 96.19%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:01

Updated-23 Oct, 2025 | 18:01

Known KEV||Action Due Date - 2022-05-25||Apply updates per vendor instructions.

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-webkitgtk Fedora Project Apple Inc.

Product-mac_os_x tvos macos watchos ipados fedora webkitgtk iphone_os iOS and iPadOS macOS Multiple Products

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-9948

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.62% / 73.01%

7 Day CHG-0.01%

Published-16 Oct, 2020 | 16:52

Updated-04 Aug, 2024 | 10:50

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-webkit Debian GNU/Linux Apple Inc.

Product-safari debian_linux webkitgtk\+Safari

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2025-5959

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-10.17% / 95.06%

7 Day CHG~0.00%

Published-11 Jun, 2025 | 00:54

Updated-26 Feb, 2026 | 17:50

Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Vendor-Google LLC

Product-chrome Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-9800

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.65% / 73.43%

7 Day CHG~0.00%

Published-09 Jun, 2020 | 16:06

Updated-04 Aug, 2024 | 10:43

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados safari mac_os_x icloud iTunes for Windows watchOS iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6537

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.55% / 71.93%

7 Day CHG~0.00%

Published-21 Sep, 2020 | 19:06

Updated-04 Aug, 2024 | 09:11

Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6464

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.92% / 77.24%

7 Day CHG~0.00%

Published-21 May, 2020 | 03:46

Updated-04 Aug, 2024 | 09:02

Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-openSUSE Google LLC Debian GNU/Linux

Product-chrome debian_linux leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6533

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.95% / 77.64%

7 Day CHG~0.00%

Published-22 Jul, 2020 | 16:16

Updated-04 Aug, 2024 | 09:02

Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports_sle leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6382

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-2.26% / 80.70%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 14:42

Updated-04 Aug, 2024 | 09:02

Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Debian GNU/Linux Red Hat, Inc.Fedora Project Google LLC openSUSE SUSE

Product-enterprise_linux_server debian_linux chrome linux_enterprise enterprise_linux_workstation fedora package_hub backports_sle enterprise_linux_desktop Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6430

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.90% / 76.94%

7 Day CHG~0.00%

Published-13 Apr, 2020 | 17:30

Updated-04 Aug, 2024 | 09:02

Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports_sle leap Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-3897

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-4.41% / 90.07%

7 Day CHG~0.00%

Published-01 Apr, 2020 | 17:49

Updated-04 Aug, 2024 | 07:52

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipad_os watchos tvos safari icloud iTunes for Windows watchOS iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-3901

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.86% / 76.50%

7 Day CHG+0.01%

Published-01 Apr, 2020 | 17:50

Updated-04 Aug, 2024 | 07:52

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipad_os watchos tvos safari icloud iTunes for Windows watchOS iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-3757

Matching Score-10

Matching Score-10

Vendor-Google LLC Adobe Inc.Red Hat, Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

CVSS Score-8.8||HIGH

EPSS-9.55% / 94.83%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:52

Updated-04 Aug, 2024 | 07:44

Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-enterprise_linux_server linux_kernel windows_8.1 enterprise_linux_workstation chrome_os windows macos windows_10 enterprise_linux_desktop flash_player Adobe Flash Player

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2025-49713

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-0.68% / 47.57%

7 Day CHG-0.01%

Published-02 Jul, 2025 | 17:18

Updated-26 Feb, 2026 | 18:27

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Vendor-Microsoft Corporation

Product-edge_chromium Microsoft Edge (Chromium-based)

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6418

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-78.81% / 99.54%

7 Day CHG~0.00%

Published-27 Feb, 2020 | 22:55

Updated-24 Oct, 2025 | 21:04

Known KEV||Action Due Date - 2022-05-03||Apply updates per vendor instructions.

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC Fedora Project Debian GNU/Linux Red Hat, Inc.

Product-enterprise_linux_server debian_linux fedora enterprise_linux_desktop enterprise_linux_workstation chrome Chrome Chromium V8

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6383

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-6.38% / 92.76%

7 Day CHG~0.00%

Published-27 Feb, 2020 | 22:55

Updated-04 Aug, 2024 | 09:02

Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC Red Hat, Inc.Fedora Project Debian GNU/Linux

Product-enterprise_linux_server debian_linux chrome enterprise_linux_workstation fedora enterprise_linux_desktop Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6468

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-6.41% / 92.80%

7 Day CHG~0.00%

Published-21 May, 2020 | 03:46

Updated-04 Aug, 2024 | 09:02

Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports_sle leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6512

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-3.00% / 85.65%

7 Day CHG~0.00%

Published-22 Jul, 2020 | 16:16

Updated-04 Aug, 2024 | 09:02

Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports_sle leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-16009

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-48.57% / 98.72%

7 Day CHG~0.00%

Published-03 Nov, 2020 | 02:21

Updated-24 Oct, 2025 | 20:56

Known KEV||Action Due Date - 2022-05-03||Apply updates per vendor instructions.

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-cefsharp Google LLC openSUSE Fedora Project Debian GNU/Linux Microsoft Corporation

Product-debian_linux backports_sle cefsharp edge_chromium fedora leap edge chrome Chrome Chromium V8

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-16015

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.99% / 57.98%

7 Day CHG~0.00%

Published-08 Jan, 2021 | 17:49

Updated-04 Aug, 2024 | 13:30

Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC

Product-chrome Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CWE ID-CWE-20

Improper Input Validation

CVE-2020-15656

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-1.51% / 71.15%

7 Day CHG~0.00%

Published-10 Aug, 2020 | 17:43

Updated-04 Aug, 2024 | 13:22

JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

Vendor-Canonical Ltd.openSUSE Mozilla Corporation

Product-ubuntu_linux thunderbird firefox firefox_esr leap Firefox Firefox ESR Thunderbird

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2019-8506

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-18.17% / 96.83%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-23 Oct, 2025 | 18:52

Known KEV||Action Due Date - 2022-05-25||Apply updates per vendor instructions.

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Red Hat, Inc.Apple Inc.

Product-itunes enterprise_linux_server tvos icloud watchos enterprise_linux_desktop enterprise_linux_workstation iphone_os safari Safari iOS iTunes for Windows tvOS watchOS iCloud for Windows Multiple Products

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2019-7820

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-10.86% / 95.29%

7 Day CHG~0.00%

Published-22 May, 2019 | 15:42

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2019-7069

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.51% / 90.27%

7 Day CHG~0.00%

Published-24 May, 2019 | 18:54

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2017-11292

Matching Score-10

Matching Score-10

Product-windows_10 mac_os_x windows_8.1 enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os Adobe Flash Player version 27.0.0.159 and earlier Flash Player

CVSS Score-8.8||HIGH

EPSS-12.10% / 95.61%

7 Day CHG~0.00%

Published-21 Oct, 2017 | 05:00

Updated-22 Apr, 2026 | 12:14

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Google LLC Microsoft Corporation Red Hat, Inc.Apple Inc.Adobe Inc.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-3853

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.34% / 67.61%

7 Day CHG~0.00%

Published-27 Feb, 2020 | 20:45

Updated-04 Aug, 2024 | 07:44

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to execute arbitrary code with system privileges.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados mac_os_x tvOS macOS watchOS iOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2024-23222

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-10.59% / 95.20%

7 Day CHG~0.00%

Published-23 Jan, 2024 | 00:25

Updated-03 Apr, 2026 | 11:42

Known KEV||Action Due Date - 2024-02-13||Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.

Vendor-Apple Inc.

Product-tvos visionos safari macos iphone_os ipados Safari visionOS macOS tvOS iOS and iPadOS Multiple Products

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2019-13730

Matching Score-10

Assigner-Chrome

Product-enterprise_linux_server enterprise_linux_for_scientific_computing debian_linux chrome enterprise_linux_workstation fedora suse_package_hub_for_suse_linux_enterprise backports enterprise_linux_desktop Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.95% / 77.58%

7 Day CHG~0.00%

Published-10 Dec, 2019 | 21:01

Updated-05 Aug, 2024 | 00:05

Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Debian GNU/Linux Novell Red Hat, Inc.Fedora Project Google LLC openSUSE

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2026-1862

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.58% / 43.12%

7 Day CHG~0.00%

Published-03 Feb, 2026 | 20:56

Updated-26 Feb, 2026 | 15:04

Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Linux Kernel Organization, Inc Google LLC Microsoft Corporation

Product-chrome linux_kernel macos windows Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2019-13764

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-6.43% / 92.82%

7 Day CHG~0.00%

Published-10 Dec, 2019 | 21:01

Updated-05 Aug, 2024 | 00:05

Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Debian GNU/Linux Red Hat, Inc.Fedora Project Google LLC openSUSE SUSE

Product-enterprise_linux_server debian_linux chrome linux_enterprise enterprise_linux_workstation fedora package_hub backports_sle enterprise_linux_desktop Chrome

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-27932

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-10.34% / 95.11%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:13

Updated-27 Oct, 2025 | 17:38

Known KEV||Action Due Date - 2022-05-03||Apply updates per vendor instructions.

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-mac_os_x itunes icloud watchos ipados macos iphone_os watchOS iOS and iPadOS macOS Multiple Products

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2024-43489

Matching Score-10

Matching Score-10