cve.bz

CWE-783: Operator Precedence Logic Error

Filter

The product uses an expression in which operator precedence causes incorrect logic to be used.

What the weakness is: CWE-783 at MITRE. All weaknesses

Ask an AI about CWE-783

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-783: Operator Precedence Logic Error and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/783.html and https://cve.bz/cve/cwe/783?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2026-108691EPSS 0.2%

    mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attacker…

  2. 5.3CVE-2026-108690EPSS 0.2%

    mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other shoppers' cart items due to an operator precedence error in the getShopCartExpiryItems SQL filter. Attackers with any sto…

  3. 7.8CVE-2026-7270EPSS 0.2%

    An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by an unprivileged user to obtain superuse…

  4. 6.9CVE-2026-0209EPSS 0.4%

    Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.

  5. 7.1CVE-2026-25233EPSS 0.4%

    PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version…

  6. 5.5CVE-2025-24210EPSS 0.3%

    A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Parsing an imag…

  7. 2.1CVE-2025-27512EPSS 0.2%

    Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the `zincati` system user to use the actions `org.projectatomic.rpmostree1.deploy` to deploy updates to the system and `org.projectatomic.rpm…

  8. 5.5CVE-2024-49736EPSS 0.07%

    In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User …

  9. 10.0CVE-2017-13322EPSS 0.2%

    In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges n…

  10. 8.6CVE-2024-20480EPSS 0.6%

    A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting i…

  11. 7.8CVE-2024-44093EPSS 0.08%

    In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne…

  12. 7.8CVE-2024-34741EPSS 0.2%

    In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility settings are restricted by the user due to a logic error in the co…

  13. 5.5CVE-2024-27886EPSS 0.5%

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode.

  14. 7.8CVE-2024-34726EPSS 0.1%

    In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interactio…

  15. 7.8CVE-2024-34723EPSS 0.1%

    In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution …

  16. 7.8CVE-2024-34720EPSS 0.1%

    In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code execution in any app zygote processes due to a logic error in the …

  17. 7.8CVE-2024-31335EPSS 0.1%

    In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. …

  18. 7.3CVE-2024-31331EPSS 0.1%

    In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interac…

  19. 7.8CVE-2024-31326EPSS 0.1%

    In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User in…

  20. 7.8CVE-2024-32896KEVEPSS 3.0%

    there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

  21. 7.5CVE-2024-20314EPSS 0.8%

    A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a…

  22. 7.8CVE-2022-20477EPSS 0.1%

    In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code. This could lead to local escalation of privilege with no additional execution pr…