CWE-783Operator Precedence Logic Error

Abstraction: Base · CVEs in our corpus: 20

The product uses an expression in which operator precedence causes incorrect logic to be used.

While often just a bug, operator precedence logic errors can have serious consequences if they are used in security-critical code, such as making an authentication decision.

Last updated: 20 August 2026 13:14 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-11 Developer Testing and Evaluation
SA-8 Security and Privacy Engineering Principles
SA-15 Development Process, Standards, and Tools

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2024-32896` KEV	8.5	7.8	0.0301	2024-06-13
`CVE-2026-25233`	6.8	9.1	0.0031	2026-02-03
`CVE-2024-20314`	6.4	8.6	0.0080	2024-03-27
`CVE-2024-20480`	6.3	8.6	0.0057	2024-09-25
`CVE-2022-20477`	5.6	7.8	0.0014	2022-12-13
`CVE-2024-31326`	5.6	7.8	0.0013	2024-07-09
`CVE-2024-31335`	5.6	7.8	0.0012	2024-07-09
`CVE-2024-34741`	5.6	7.8	0.0015	2024-08-15
`CVE-2026-7270`	5.6	7.8	0.0018	2026-04-30
`CVE-2024-34720`	5.5	7.8	0.0011	2024-07-09
`CVE-2024-34723`	5.5	7.8	0.0011	2024-07-09
`CVE-2024-34726`	5.5	7.8	0.0011	2024-07-09
`CVE-2024-44093`	5.4	7.8	0.0008	2024-09-13
`CVE-2024-31331`	5.2	7.3	0.0012	2024-07-09
`CVE-2024-27886`	4.4	5.5	0.0048	2024-07-29
`CVE-2025-24210`	4.3	5.5	0.0031	2025-03-31
`CVE-2017-13322`	4.2	5.5	0.0016	2025-01-17
`CVE-2024-49736`	4.0	5.5	0.0007	2025-01-21