CWE-783
22 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 22
- Last 12 months
- 5
- Critical
- 1
- Known exploited
- 1
Critical 1High 14Medium 6Low 1Not scored 0
CVEs per yearBy the year they were published
- 20221
- 202412
- 20254
- 20265
Known exploitedNewest addition to KEV first
- CVE-2024-32896
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges…
Google · Android
ExploitedHigh8.1
Newest CVEs
- CVE-2026-108691
mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList
gz-yami · mall4j
Medium5.3 - CVE-2026-108690
mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList
gz-yami · mall4j
Medium5.3 - CVE-2026-7270
Local privilege escalation via execve()
FreeBSD · FreeBSD
High7.8 - CVE-2026-0209
Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.
PureStorage · FlashArray
Medium6.9 - CVE-2026-25233
PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
pear · pearweb
High7.1 - CVE-2025-24210
A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma…
Apple · iOS and iPadOS
Medium5.5 - CVE-2025-27512
Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods
coreos · zincati
Low2.1 - CVE-2024-49736
In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead…
Google · Android
Medium5.5 - CVE-2017-13322
In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This…
Google · Android
Critical10.0 - CVE-2024-20480
A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthenticated,…
Cisco · Cisco IOS XE Software
High8.6