CWE-783: Operator Precedence Logic Error
The product uses an expression in which operator precedence causes incorrect logic to be used.
6 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2024-20480 — A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge
- CVE-2026-25233 — PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
- CVE-2026-7270 — Local privilege escalation via execve()
- CVE-2026-0209 — Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than c
- CVE-2025-27512 — Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods
Recently published
- CVE-2026-7270 — Local privilege escalation via execve()
- CVE-2026-0209 — Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than c
- CVE-2026-25233 — PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
- CVE-2025-27512 — Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods
- CVE-2024-20480 — A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge