What CVEs are caused by CWE-1023?

7 recorded CVEs are attributed to CWE-1023, including CVE-2026-7473, CVE-2021-23146, CVE-2025-62000. 1 are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.

What are the consequences of CWE-1023?

Exploiting CWE-1023 can lead to: Alter Execution Logic, Bypass Protection Mechanism.

Is CWE-1023 actively exploited?

Yes. 1 CWE-1023 vulnerabilities are in CISA's KEV catalog of actively exploited flaws, out of 7 recorded CVEs.

Class weakness

Incomplete

CWE-1023: Incomplete Comparison with Missing Factors

The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.

Last updated May 1, 2026

Recorded CVEs

With this primary weakness

KEVs

In the CISA KEV catalog

Not rated

Likelihood of exploit

Per MITRE

Class

Abstraction

MITRE classification

Overview

CWE-1023 (Incomplete Comparison with Missing Factors) is a class-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.

Real-world CVEs

7 recorded CVEs are caused by CWE-1023 (Incomplete Comparison with Missing Factors), including 1 in CISA's KEV (Known Exploited Vulnerabilities) catalog. KEVs are shown first. 3 new CWE-1023 CVEs have been recorded so far in 2026 (3 in 2025).

Common consequences

What can happen when CWE-1023 is exploited.

Alter Execution Logic, Bypass Protection Mechanism

Affects: Integrity, Access Control

An incomplete comparison can lead to resultant weaknesses, e.g., by operating on the wrong object or making a security decision without considering a required factor.

How it happens

When it is introduced

Typically introduced during these phases of the software lifecycle.

Implementation

How to detect it

Manual Static Analysis

Thoroughly test the comparison scheme before deploying code into production. Perform positive testing as well as negative testing.

Code examples

Illustrative examples from MITRE showing how the weakness appears in code.

Consider an application in which Truck objects are defined to be the same if they have the same make, the same model, and were manufactured in the same year.

Vulnerable example

java

public class Truck {

Here, the equals() method only checks the make and model of the Truck objects, but the year of manufacture is not included.

This example defines a fixed username and password. The AuthenticateUser() function is intended to accept a username and a password from an untrusted user, and check to ensure that it matches the username and password. If the username and password match, AuthenticateUser() is intended to indicate that authentication succeeded.

Vulnerable example

/* Ignore CWE-259 (hard-coded password) and CWE-309 (use of password system for authentication) for this example. */

Attack input

plaintext

Illustrative examples

Real CVEs that MITRE cites as examples of this weakness.

CVE-2005-2782 — PHP remote file inclusion in web application that filters "http" and "https" URLs, but not "ftp".
CVE-2014-6394 — Product does not prevent access to restricted directories due to partial string comparison with a public directory

Frequently asked questions

Common questions about CWE-1023.

What is CWE-1023?: The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.
What CVEs are caused by CWE-1023?: 7 recorded CVEs are attributed to CWE-1023, including CVE-2026-7473, CVE-2021-23146, CVE-2025-62000. 1 are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
How is CWE-1023 detected?: Manual Static Analysis: Thoroughly test the comparison scheme before deploying code into production. Perform positive testing as well as negative testing.
What are the consequences of CWE-1023?: Exploiting CWE-1023 can lead to: Alter Execution Logic, Bypass Protection Mechanism.
Is CWE-1023 actively exploited?: Yes. 1 CWE-1023 vulnerabilities are in CISA's KEV catalog of actively exploited flaws, out of 7 recorded CVEs.

References

Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.

Stay ahead of CWE-1023

Get alerted the moment a new CWE-1023 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.

Start free See pricing