VulnerabilityModified

CVE-1999-1362

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters.

LOW 2.1EPSS 1.49%

Does this matter?

Lower severity and a low EPSS score (1.49%). Track it; it rarely justifies an emergency change on its own.

Description

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters.

CVSS 2.0: 2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS: 1.49% probability · 74th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Affected: microsoft/windows nt
Source: cve@mitre.org

EPSS trend

EPSS 1.5% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

http://support.microsoft.com/support/kb/articles/q160/6/01.aspPatch, Vendor Advisory
http://www.iss.net/security_center/static/7403.php
http://support.microsoft.com/support/kb/articles/q160/6/01.aspPatch, Vendor Advisory
http://www.iss.net/security_center/static/7403.php

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.