CWE-1023Incomplete Comparison with Missing Factors

Abstraction: Class · CVEs in our corpus: 13

The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.

Last updated: 20 August 2026 13:14 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.AA-03
PR.AA-05
AC-3 Access Enforcement
AC-24 Access Control Decisions

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

V6.3.4
V6.3.5
V6.1.3
V6.5.7

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2026-7473` KEV	7.5	5.8	0.0111	2026-06-05
`CVE-2026-4599`	6.9	9.1	0.0048	2026-03-23
`CVE-2026-24255`	5.8	7.5	0.0038	2026-08-04
`CVE-2026-4748`	5.7	7.5	0.0025	2026-04-01
`CVE-2021-23146`	5.6	7.1	0.0085	2021-11-18
`CVE-2025-62000`	5.2	7.1	0.0021	2025-12-18
`CVE-2026-53839`	5.0	6.5	0.0027	2026-06-12
`CVE-2025-55333`	4.9	6.1	0.0082	2025-10-14
`CVE-2026-53859`	4.9	6.5	0.0021	2026-06-16
`CVE-2026-48761`	4.5	6.1	0.0027	2026-07-14
`CVE-2025-46722`	3.5	4.2	0.0029	2025-05-29
`CVE-2024-5528`	3.2	3.5	0.0040	2025-02-05
`CVE-2026-48587`	2.8	3.1	0.0035	2026-06-03