Advisories · Weakness
CWE-783.
Every Advisory and CVE whose sources give the weakness CWE-783, newest first.
- CVSS 5.3 Medium
mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList
- gz-yami mall4j
- CWE-783
- CVSS 5.3 Medium
mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList
- gz-yami mall4j
- CWE-783
- CVSS 7.8 High
Local privilege escalation via execve()
- FreeBSD
- CWE-783
- CVSS 5.1 Medium
DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation
- CWE-697
- CWE-783
<3.4.0 · fixed in 3.4.0
GHSA-39q2-94rc-95cp · CVE-2026-65903 - CVSS 6.9 Medium
PureStorage FlashArray: Under certain administrative conditions…
- PureStorage FlashArray
- CWE-783
- CVSS 7.1 High
PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
- pearweb
- CWE-783
- CVSS 5.5 Medium
A logic error was addressed with improved error handling.
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-783
- CVSS 2.1 Low
Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods
- Broken access control
- CWE-783
>=0.0.24, <0.0.30 · fixed in 0.0.30
GHSA-w6fv-6gcc-x825 · CVE-2025-27512 - CVSS 5.5 Medium
In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 10.0 CriticalCritical · CVSS 9+
In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 8.6 High
Cisco IOS XE Software: A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined…
- Cisco IOS XE Software
- CWE-783
- CVSS 7.4 High
In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 7.8 High
Improper privilege management in Google Android
- Google Android
- Privilege escalation
- CWE-783
- CVSS 7.5 High
A logic issue was addressed with improved restrictions.
- Apple macOS
- CWE-783
- CVSS 7.8 High
In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 5.3 Medium
In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 7.4 High
Google Android: In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of…
- Google Android
- CWE-783
- CVSS 8.4 High
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 7.8 High
In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 7.8 High
In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 8.1 HighCritical · KEVKEV
there is a possible way to bypass due to a logic error in the code.
- Google Android
- CWE-783
- CVSS 8.6 High
Cisco IOS XE Software: A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature…
- Cisco IOS XE Software
- CWE-783
- CVSS 7.8 High
Android: In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt…
- Android
- CWE-783