Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1023: Incomplete Comparison with Missing Factors

Class Incomplete

The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.

Source: MITRE CWE-1023

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-81376

    Visual Studio Code Security Feature Bypass Vulnerability

    Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

    Microsoft Visual Studio Code
  • Critical 9.1
    CVE-2026-4599

    jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation

    Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions in src/crypto-1.1.js; an attacker can recover the privat…

    jsrsasign npm