Cyber Resilience

CWE · MITRE source

CWE-1333Inefficient Regular Expression Complexity

Abstraction: Base · CVEs in our corpus: 476

The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

Last updated: 21 August 2026 20:21 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 1 mapping(s) from 1 framework(s): CAPEC 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • ID.RA-01
  • SA-11 Developer Testing and Evaluation
  • SI-10 Information Input Validation
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2023-3364 7.87.50.44492023-08-02
CVE-2024-8124 7.67.50.39982024-09-12
CVE-2023-29486 7.59.80.01032023-12-21
CVE-2021-32837 7.47.50.28872023-01-17
CVE-2024-2829 7.37.50.25962024-04-25
CVE-2026-35458 7.39.80.00502026-04-07
CVE-2026-52778 7.39.80.00562026-06-08
CVE-2022-24713 6.97.50.14462022-03-08
CVE-2023-29487 6.99.10.00662023-12-21
CVE-2021-3749 6.77.50.08522021-08-31
CVE-2024-2651 6.76.50.33302024-05-14
CVE-2015-8315 6.67.50.06822017-01-23
CVE-2023-23925 6.68.60.00542023-02-03
CVE-2022-31129 6.57.50.04922022-07-06
CVE-2015-8854 6.47.50.04332017-01-23
CVE-2021-27291 6.47.50.03912021-03-17
CVE-2021-3807 6.47.50.03552021-09-17
CVE-2022-24836 6.47.50.03552022-04-11
CVE-2023-23621 6.48.60.00872023-01-28
CVE-2023-43646 6.48.60.01112023-09-27
CVE-2021-26813 6.37.50.02382021-03-03
CVE-2021-23446 6.37.50.02962021-09-29
CVE-2021-41817 6.37.50.03222022-01-01
CVE-2022-21680 6.37.50.02832022-01-14
CVE-2022-21681 6.37.50.02742022-01-14