microsoft windows 95

Name: microsoft windows 95
Brand: microsoft

productUS

cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical18high23medium5low

updated 2026-10-28

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-1999-0016US	medium5.0	96.4% (100th)	Exploit	no fix	1997-12-01	—
CVE-2000-0979US	medium6.4OT high	75.1% (100th)	Exploit	no fix	2000-12-19	—
CVE-1999-0256US	high7.5	72.9% (99th)	Exploit	no fix	1998-02-01	—
CVE-2000-0305US	high7.8	38.4% (99th)	Exploit	no fix	2000-05-19	—
CVE-1999-0015US	medium5.0	35.4% (98th)	Exploit	no fix	1997-12-16	= 0.0a
CVE-1999-0918US	high7.8	26.4% (98th)	Exploit	no fix	1999-07-03	—
CVE-1999-0153US	medium5.0	21.1% (98th)	Exploit	no fix	1997-07-01	—
CVE-2000-0168US	medium5.0	19.6% (97th)	Exploit	no fix	2000-03-04	—
CVE-2000-0347US	medium5.0	17.6% (97th)	Exploit	no fix	2000-05-02	—
CVE-2000-0330US	high7.6	15.0% (97th)	Exploit	no fix	1999-11-12	—
CVE-1999-0875US	high7.5	10.2% (96th)	Exploit	no fix	1999-08-11	2 versions
CVE-1999-0749US	low2.6	7.96% (95th)	Exploit	no fix	1999-08-16	—
CVE-2000-0155US	high7.2	3.94% (90th)	Exploit	no fix	2000-02-18	—
CVE-2000-0129US	low2.1	3.79% (90th)	Exploit	no fix	2000-02-04	—
CVE-1999-0975US	medium4.6	2.70% (86th)	Exploit	no fix	1999-12-10	—
CVE-2000-1039US	medium5.0	45.8% (99th)	—	no fix	2001-01-09	—
CVE-2002-0053US	high7.5	35.0% (98th)	—	no fix	2002-03-08	—
CVE-1999-1105US	medium5.0	21.6% (98th)	—	no fix	1999-12-31	—
CVE-2000-0742US	medium5.0	18.8% (97th)	—	no fix	2000-10-20	—
CVE-1999-1593US	high7.6	18.1% (97th)	—	no fix	2009-01-15	—
CVE-2000-0404US	medium5.0	17.9% (97th)	—	no fix	2000-05-25	—
CVE-1999-0444US	medium5.0	16.5% (97th)	—	no fix	1999-04-12	—
CVE-2000-1079US	high7.5OT elevated	15.9% (97th)	—	no fix	2000-08-29	—
CVE-2002-1260US	high7.5	15.5% (97th)	—	no fix	2002-12-23	—
CVE-2002-1258US	medium5.0	15.3% (97th)	—	no fix	2002-12-23	—
CVE-2002-1257US	high10.0	15.3% (97th)	—	no fix	2002-12-23	—
CVE-2001-0238US	high7.5	14.8% (97th)	—	no fix	2001-07-02	—
CVE-1999-1201US	medium5.0	13.9% (97th)	—	no fix	1999-02-06	—
CVE-2002-1325US	medium5.0	13.9% (97th)	—	no fix	2002-12-23	—
CVE-1999-1254US	medium5.0	13.3% (96th)	—	no fix	1999-03-08	—
CVE-1999-1291US	medium5.0	13.3% (96th)	—	no fix	1998-10-05	—
CVE-2000-0980US	medium5.0	13.2% (96th)	—	no fix	2000-12-19	—
CVE-2000-1003US	low2.6	12.5% (96th)	—	no fix	2000-12-11	—
CVE-1999-0909US	high7.5	12.0% (96th)	—	no fix	1999-09-20	2 versions
CVE-1999-0104US	medium5.0	9.32% (95th)	—	no fix	1997-12-16	= 0a
CVE-2000-0612US	medium5.0	8.64% (95th)	—	no fix	2000-06-29	—
CVE-1999-0387US	high7.8	7.85% (95th)	—	no fix	1999-11-29	—
CVE-1999-0258US	medium5.0	6.04% (93rd)	—	no fix	1998-02-13	—
CVE-1999-0179US	medium5.0	6.03% (93rd)	—	no fix	1997-01-01	—
CVE-1999-0590US	high10.0	6.02% (93rd)	—	no fix	2000-06-01	—
CVE-1999-0717US	low2.6	5.84% (93rd)	—	no fix	1999-05-07	—
CVE-1999-0519US	high7.5OT elevated	5.63% (93rd)	—	no fix	1997-01-01	—
CVE-1999-0518US	high7.5OT elevated	4.79% (92nd)	—	no fix	1997-01-01	—
CVE-2005-2388US	high7.2	1.81% (78th)	—	no fix	2005-07-27	—
CVE-2002-1692US	low3.6	1.50% (74th)	—	no fix	2002-12-31	—
CVE-1999-1104US	medium4.6	1.00% (63rd)	—	no fix	1999-12-31	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption14 CVEs
CWE-20Improper Input Validation12 CVEs
CWE-399CWE-3999 CVEs
CWE-284Improper Access Control7 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer6 CVEs
CWE-264CWE-2642 CVEs
CWE-287Improper Authentication2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan