Microsoft Windows 95 vulnerabilities
5 vulnerabilities
Known vulnerabilities in Microsoft Windows 95, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-1999-1593microsoftwindows_2000+2
EPSS score18.13%
Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.CVE-1999-0015hphp-ux+4EPSS score35.44%
Teardrop IP denial of service.CVE-1999-0875microsoftwindows_95+2EPSS score10.16%
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.CVE-1999-0909microsoftwindows_95+1EPSS score12.01%
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.CVE-1999-0104calderaopenlinux+3EPSS score9.32%
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.