CWE-783: Operator Precedence Logic Error
The product uses an expression in which operator precedence causes incorrect logic to be used.
Overview
While often just a bug, operator precedence logic errors can have serious consequences if they are used in security-critical code, such as making an authentication decision.
Real-world CVEs
19 recorded CVEs are caused by CWE-783 (Operator Precedence Logic Error), including 1 in CISA's KEV (Known Exploited Vulnerabilities) catalog. KEVs are shown first. 3 new CWE-783 CVEs have been recorded so far in 2026 (4 in 2025).