CWE-783 Operator Precedence Logic Error
baseThe product uses an expression in which operator precedence causes incorrect logic to be used.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (27)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-32896US | high7.8OT critical | KEV | ||
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti… | ||||
| CVE-2024-34741US | high7.8 | Exploit | ||
In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility setting… | ||||
| CVE-2026-25233US | critical9.1 | — | ||
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update,… | ||||
| CVE-2024-20480US | high8.6 | — | ||
A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated, remote attacker to ca… | ||||
| CVE-2024-44093US | high7.8 | — | ||
In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additio… | ||||
| CVE-2024-34726US | high7.8 | — | ||
In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with… | ||||
| CVE-2024-34723US | high7.8 | — | ||
In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to… | ||||
| CVE-2024-34720US | high7.8 | — | ||
In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code executi… | ||||
| CVE-2024-31335US | high7.8 | — | ||
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in… | ||||
| CVE-2024-31326US | high7.8 | — | ||
In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local escalation of privil… | ||||
| CVE-2022-20477US | high7.8 | — | ||
In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code. This could lead to lo… | ||||
| CVE-2024-20314US | high7.5 | — | ||
A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU… | ||||
| CVE-2024-31331US | high7.3 | — | ||
In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to local escalation of pr… | ||||
| CVE-2026-108691US | medium5.4 | — | ||
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator preceden… | ||||
| CVE-2026-98126US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
smb/client: validate new EOF for zero range
When FALLOC_FL_ZERO_RANGE is used without FALLOC_FL_KEEP_SIZE,
smb… | ||||
| CVE-2026-53019US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc()
Fix inverted condition that skips frequ… | ||||
| CVE-2017-13322US | medium5.5 | — | ||
In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local… | ||||
| CVE-2024-27886US | medium5.5 | — | ||
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log keystrokes in other app… | ||||
| CVE-2026-108690US | medium4.3 | — | ||
mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other shoppers' cart items due to an operator precedence error in th… | ||||
| CVE-2026-7270US | — | Exploit | ||
An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers.
The bug ma… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan