Weaknesses of type CWE-783

20 results

Erro de precedência de operadores

Ocorre quando o desenvolvedor assume uma ordem de avaliação diferente da que a linguagem de fato executa, causando lógica incorreta em expressões com múltiplos operadores. O risco é contornar validações, acessar dados não autorizados ou executar código inesperado porque a condição não funciona como planejado.

Example

Um código valida acesso assim: `if (user.isAdmin || user.isEditor && user.isActive)`. A intenção era 'admin OU (editor E ativo)', mas a precedência faz avaliar como 'admin OU (editor E ativo)', deixando editors inativos passarem se forem também admins. Resultado: falha na autorização.

How to mitigate

Use parênteses explícitos em toda expressão booleana complexa, deixando clara a intenção, e revise lógica de acesso com especial atenção a operadores `||` e `&&` lado a lado. Testes de segurança (testes de limite de autorização) pegam essas falhas rapidamente.

CVE-2024-32896HIGHthere is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional exeEPSS 3.0%KEVCVE-2024-20314HIGHA vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticEPSS 0.8%CVE-2024-20480HIGHA vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow aEPSS 0.6%CVE-2024-27886HIGHA logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app maEPSS 0.5%CVE-2026-0209MEDIUMUnder certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.EPSS 0.4%CVE-2026-25233HIGHPEAR Has a Roadmap Authorization Bypass via Operator Precedence BugEPSS 0.3%CVE-2025-24210MEDIUMA logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4EPSS 0.3%CVE-2026-7270HIGHLocal privilege escalation via execve()EPSS 0.2%CVE-2025-27512LOWZincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methodsEPSS 0.2%CVE-2017-13322CRITICALIn endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error EPSS 0.2%CVE-2024-34741HIGHIn setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaEPSS 0.2%CVE-2022-20477HIGHIn shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic EPSS 0.1%CVE-2024-31326HIGHIn multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This EPSS 0.1%CVE-2024-31335HIGHIn DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lEPSS 0.1%CVE-2024-31331HIGHIn setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. TEPSS 0.1%CVE-2024-34723MEDIUMIn onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logiEPSS 0.1%CVE-2024-34726HIGHIn PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local esEPSS 0.1%CVE-2024-34720HIGHIn com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible EPSS 0.1%CVE-2024-44093HIGHIn ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to localEPSS 0.1%CVE-2024-49736MEDIUMIn onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the codEPSS 0.1%