CWE-783 · Input Validation and Logic
Operator Precedence Logic Error
22CVEs
SortMost likely exploited
22 CVEs with CWE-783 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-32896In CISA KEVExploitedthere is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti…Google · Android · CVSS 8.1 · 2024-06-13 | 8.1 | 3.0% | 2024-06-13 |
| CVE-2024-20314A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU…Cisco · Cisco IOS XE Software · CVSS 8.6 · 2024-03-27 | 8.6 | 0.8% | 2024-03-27 |
| CVE-2024-20480A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated, remote attacker to c…Cisco · Cisco IOS XE Software · CVSS 8.6 · 2024-09-25 | 8.6 | 0.6% | 2024-09-25 |
| CVE-2024-27886A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log keystrokes in other ap…Apple · macOS · CVSS 7.5 · 2024-07-29 | 7.5 | 0.5% | 2024-07-29 |
| CVE-2026-0209Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.PureStorage · FlashArray · CVSS 6.9 · 2026-04-14 | 6.9 | 0.4% | 2026-04-14 |
| CVE-2026-25233PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bugpear · pearweb · CVSS 7.1 · 2026-02-03 | 7.1 | 0.4% | 2026-02-03 |
| CVE-2025-24210A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13…Apple · iOS and iPadOS · CVSS 5.5 · 2025-03-31 | 5.5 | 0.3% | 2025-03-31 |
| CVE-2026-108691mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdListgz-yami · mall4j · CVSS 5.4 · 2026-10-11 | 5.4 | 0.2% | 2026-10-11 |
| CVE-2026-108690mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdListgz-yami · mall4j · CVSS 4.3 · 2026-10-11 | 4.3 | 0.2% | 2026-10-11 |
| CVE-2025-27512Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methodscoreos · zincati · CVSS 2.1 · 2025-03-17 | 2.1 | 0.2% | 2025-03-17 |
| CVE-2026-7270Local privilege escalation via execve()FreeBSD · FreeBSD · CVSS 7.8 · 2026-04-30 | 7.8 | 0.2% | 2026-04-30 |
| CVE-2017-13322In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local…Google · Android · CVSS 10 · 2025-01-17 | 10.0 | 0.2% | 2025-01-17 |
| CVE-2024-34741In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility settin…Google · Android · CVSS 7.8 · 2024-08-15 | 7.8 | 0.2% | 2024-08-15 |
| CVE-2022-20477In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code. This could lead to l…Google · Android · CVSS 7.8 · 2022-12-13 | 7.8 | 0.1% | 2022-12-13 |
| CVE-2024-31326In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local escalation of privi…Google · Android · CVSS 7.8 · 2024-07-09 | 7.8 | 0.1% | 2024-07-09 |
| CVE-2024-31335In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in…Google · Android · CVSS 8.4 · 2024-07-09 | 8.4 | 0.1% | 2024-07-09 |
| CVE-2024-31331In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to local escalation of p…Google · Android · CVSS 7.8 · 2024-07-09 | 7.8 | 0.1% | 2024-07-09 |
| CVE-2024-34723In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to…Google · Android · CVSS 5.3 · 2024-07-09 | 5.3 | 0.1% | 2024-07-09 |
| CVE-2024-34726In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel wit…Google · Android · CVSS 7.8 · 2024-07-09 | 7.8 | 0.1% | 2024-07-09 |
| CVE-2024-34720In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code execut…Google · Android · CVSS 7.4 · 2024-07-09 | 7.4 | 0.1% | 2024-07-09 |
| CVE-2024-44093In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additi…Google · Android · CVSS 7.4 · 2024-09-13 | 7.4 | 0.1% | 2024-09-13 |
| CVE-2024-49736In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of s…Google · Android · CVSS 5.5 · 2025-01-21 | 5.5 | 0.1% | 2025-01-21 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.