CWE · MITRE source
CWE-1023Incomplete Comparison with Missing Factors
The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.
Last updated: 14 October 2026 20:41 UTC
NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2026-7473 KEV UPD | 7.5 | 5.8 | 0.0065 | 2026-06-05 |
CVE-2026-4599 UPD | 7.0 | 9.1 | 0.0078 | 2026-03-23 |
CVE-2026-81376 | 6.9 | 9.6 | 0.0082 | 2026-09-08 |
CVE-2026-85491 | 6.5 | 8.8 | 0.0036 | 2026-09-24 |
CVE-2026-24255 | 5.9 | 7.5 | 0.0054 | 2026-08-04 |
CVE-2026-4748 | 5.8 | 7.5 | 0.0042 | 2026-04-01 |
CVE-2021-23146 UPD | 5.6 | 7.1 | 0.0088 | 2021-11-18 |
CVE-2026-14199 UPD | 5.4 | 7.1 | 0.0031 | 2026-09-02 |
CVE-2025-62000 UPD | 5.2 | 7.1 | 0.0021 | 2025-12-18 |
CVE-2026-91768 | 5.2 | 6.5 | 0.0056 | 2026-09-25 |
CVE-2026-53839 UPD | 5.1 | 6.5 | 0.0046 | 2026-06-12 |
CVE-2026-53859 | 5.1 | 6.5 | 0.0036 | 2026-06-16 |
CVE-2025-55333 UPD | 4.9 | 6.1 | 0.0086 | 2025-10-14 |
CVE-2026-48761 | 4.6 | 6.1 | 0.0034 | 2026-07-14 |
CVE-2026-54181 UPD | 4.2 | 5.4 | 0.0031 | 2026-09-14 |
CVE-2025-46722 UPD | 3.5 | 4.2 | 0.0032 | 2025-05-29 |
CVE-2026-54713 UPD | 3.3 | 3.7 | 0.0046 | 2026-08-27 |
CVE-2024-5528 UPD | 3.2 | 3.5 | 0.0041 | 2025-02-05 |
CVE-2026-48587 UPD | 2.9 | 3.1 | 0.0043 | 2026-06-03 |
CVE-2026-91836 | 2.6 | 2.8 | 0.0032 | 2026-09-15 |