CWE-783: Operator Precedence Logic Error
The product uses an expression in which operator precedence causes incorrect logic to be used.
A kind of CWE-670 Always-Incorrect Control Flow Implementation.
From the CWE List. © The MITRE Corporation.
Newest
- gz-yami mall4j mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList 5.3 Medium
- gz-yami mall4j mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList 5.3 Medium
- freebsd Local privilege escalation via execve() 7.8 High
- purestorage flasharray Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies... 6.9 Medium
- pear pearweb PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug 7.1 High
- apple ipados, macos, tvos +4 more +6 more A logic error was addressed with improved error handling. This issue is fixed in visionOS 2.4,... 5.5 Medium
- coreos zincati Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods 2.1 Low
- google android In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access... 10.0 Critical
- google android In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit... 5.5 Medium
- cisco ios xe software, ios xe +1 more A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access ... 8.6 High
- google android In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic... 7.8 High
- google android In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic... 7.8 High
- google android In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for... 7.8 High
- apple macos, mac os +1 more A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4.... 5.5 Medium
- google android, imaginationtech powervr-gpu +1 more In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic... 7.8 High
- google android In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to... 7.8 High
- google android In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of... 7.8 High
- google android, imaginationtech powervr-gpu +1 more In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due... 7.8 High
- google android In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from... 7.3 High
- android pixel, google android +1 more there is a possible way to bypass due to a logic error in the code. This could lead to local... 7.8 High
- google android In multiple locations, there is a possible way in which policy migration code will never be... 7.8 High
- cisco ios xe software, ios xe +1 more A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco... 8.6 High
- google android In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way... 7.8 High
- cure53 dompurify DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS 5.1 Medium