Skip to content

CWE-783 · weakness in Input Validation and Logic

Operator Precedence Logic Error

22 CVEs · 1 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

  1. there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti…CVE-2024-32896Google · CVSS 8.1 · 3.0% likely

    Google

  2. A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU…CVE-2024-20314Cisco · CVSS 8.6 · 0.8% likely

    Cisco

  3. A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated, remote attacker to c…CVE-2024-20480Cisco · CVSS 8.6 · 0.6% likely

    Cisco

  4. A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log keystrokes in other ap…CVE-2024-27886Apple · CVSS 7.5 · 0.5% likely

    Apple

  5. Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.CVE-2026-0209PureStorage · CVSS 6.9 · 0.4% likely

    Pure Storage

  6. PEAR Has a Roadmap Authorization Bypass via Operator Precedence BugCVE-2026-25233pear · CVSS 7.1 · 0.4% likely

    PEAR

  7. A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13…CVE-2025-24210Apple · CVSS 5.5 · 0.3% likely

    Apple

  8. mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdListCVE-2026-108691gz-yami · CVSS 5.4 · 0.2% likely

    Gz-Yami

  9. mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdListCVE-2026-108690gz-yami · CVSS 4.3 · 0.2% likely

    Gz-Yami

  10. Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methodsCVE-2025-27512coreos · CVSS 2.1 · 0.2% likely
  11. Local privilege escalation via execve()CVE-2026-7270FreeBSD · CVSS 7.8 · 0.2% likely

    FreeBSD

  12. In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local…CVE-2017-13322Google · CVSS 10 · 0.2% likely

    Google

  13. In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility settin…CVE-2024-34741Google · CVSS 7.8 · 0.2% likely

    Google

  14. In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code. This could lead to l…CVE-2022-20477Google · CVSS 7.8 · 0.1% likely

    Google

  15. In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local escalation of privi…CVE-2024-31326Google · CVSS 7.8 · 0.1% likely

    Google

  16. In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in…CVE-2024-31335Google · CVSS 8.4 · 0.1% likely

    Google

  17. In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to local escalation of p…CVE-2024-31331Google · CVSS 7.8 · 0.1% likely

    Google

  18. In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to…CVE-2024-34723Google · CVSS 5.3 · 0.1% likely

    Google

  19. In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel wit…CVE-2024-34726Google · CVSS 7.8 · 0.1% likely

    Google

  20. In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code execut…CVE-2024-34720Google · CVSS 7.4 · 0.1% likely

    Google

  21. In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additi…CVE-2024-44093Google · CVSS 7.4 · 0.1% likely

    Google

  22. In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of s…CVE-2024-49736Google · CVSS 5.5 · 0.1% likely

    Google

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in