# CWE-783.

Every Advisory and CVE whose sources give the weakness CWE-783, newest first.

## Records, newest first

- [mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList](https://agentprime.io/advisories/CVE-2026-108691.md)
  `CVE-2026-108691` · CVE record: gz-yami mall4j · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-783
- [mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList](https://agentprime.io/advisories/CVE-2026-108690.md)
  `CVE-2026-108690` · CVE record: gz-yami mall4j · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-783
- [Local privilege escalation via execve()](https://agentprime.io/advisories/CVE-2026-7270.md)
  `CVE-2026-7270` · CVE record: FreeBSD FreeBSD · CVSS 7.8 High · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-783
- [DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation](https://agentprime.io/advisories/GHSA-39q2-94rc-95cp.md)
  `GHSA-39q2-94rc-95cp`, `CVE-2026-65903` · npm `dompurify`: affected `<3.4.0`, fixed in `3.4.0` · CVSS 5.1 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-697, CWE-783
- [PureStorage FlashArray: Under certain administrative conditions…](https://agentprime.io/advisories/CVE-2026-0209.md)
  `CVE-2026-0209` · CVE record: PureStorage FlashArray · CVSS 6.9 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-783
- [PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug](https://agentprime.io/advisories/CVE-2026-25233.md)
  `CVE-2026-25233` · CVE record: pear pearweb · CVSS 7.1 High · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-783
- [A logic error was addressed with improved error handling.](https://agentprime.io/advisories/CVE-2025-24210.md)
  `CVE-2025-24210` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 31 Mar 2025 · Tags: CWE-783
- [Zincati allows unprivileged access to rpm-ostree D-Bus \`Deploy()\` and \`FinalizeDeployment()\` methods](https://agentprime.io/advisories/GHSA-w6fv-6gcc-x825.md)
  `GHSA-w6fv-6gcc-x825`, `CVE-2025-27512` · crates.io `zincati`: affected `>=0.0.24, <0.0.30`, fixed in `0.0.30` · CVSS 2.1 Low · Not analysed yet · Published 17 Mar 2025 · Tags: Broken access control, CWE-783
- [In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-49736.md)
  `CVE-2024-49736` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: CWE-783
- [In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code.](https://agentprime.io/advisories/CVE-2017-13322.md)
  `CVE-2017-13322` · CVE record: Google Android · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jan 2025 · Tags: CWE-783
- [Cisco IOS XE Software: A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined…](https://agentprime.io/advisories/CVE-2024-20480.md)
  `CVE-2024-20480` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-783
- [In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-44093.md)
  `CVE-2024-44093` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 13 Sept 2024 · Tags: CWE-783
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2024-34741.md)
  `CVE-2024-34741` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Aug 2024 · Tags: Privilege escalation, CWE-783
- [A logic issue was addressed with improved restrictions.](https://agentprime.io/advisories/CVE-2024-27886.md)
  `CVE-2024-27886` · CVE record: Apple macOS · CVSS 7.5 High · Not analysed yet · Published 29 Jul 2024 · Tags: CWE-783
- [In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-34726.md)
  `CVE-2024-34726` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783
- [In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-34723.md)
  `CVE-2024-34723` · CVE record: Google Android · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783
- [Google Android: In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of…](https://agentprime.io/advisories/CVE-2024-34720.md)
  `CVE-2024-34720` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783
- [In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-31335.md)
  `CVE-2024-31335` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783
- [In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-31331.md)
  `CVE-2024-31331` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783
- [In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-31326.md)
  `CVE-2024-31326` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-783
- [there is a possible way to bypass due to a logic error in the code.](https://agentprime.io/advisories/CVE-2024-32896.md)
  `CVE-2024-32896` · CVE record: Google Android · CVSS 8.1 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-783
- [Cisco IOS XE Software: A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature…](https://agentprime.io/advisories/CVE-2024-20314.md)
  `CVE-2024-20314` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-783
- [Android: In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt…](https://agentprime.io/advisories/CVE-2022-20477.md)
  `CVE-2022-20477` · CVE record: Android · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2022 · Tags: CWE-783

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-783>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-783/>. Everything for agents: <https://agentprime.io/llms.txt>.