本ページは microsoft windows_95 に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-1999-1593 | Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable. | [email protected] | 7.6 | 4.20% | 2009-01-15 | 2026-04-23 |
| CVE-2005-2388 | Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code. | [email protected] | 7.2 | 1.06% | 2005-07-27 | 2026-04-16 |
| CVE-2002-1692 | Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long extension to be placed in a folder to be backed up. | [email protected] | 3.6 | 0.49% | 2002-12-31 | 2026-04-16 |
| CVE-2002-1325 | Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability." | [email protected] | 5.0 | 7.98% | 2002-12-23 | 2026-04-16 |
| CVE-2002-1260 | The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet. | [email protected] | 7.5 | 5.21% | 2002-12-23 | 2026-04-16 |
| CVE-2002-1258 | Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error. | [email protected] | 5.0 | 6.12% | 2002-12-23 | 2026-04-16 |
| CVE-2002-1257 | Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail. | [email protected] | 10.0 | 5.39% | 2002-12-23 | 2026-04-16 |
| CVE-2002-0053 | Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available. | [email protected] | 7.5 | 49.15% | 2002-03-08 | 2026-04-16 |
| CVE-2001-0238 | Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests. | [email protected] | 7.5 | 6.30% | 2001-07-02 | 2026-04-16 |
| CVE-2000-1039 | Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of ab | [email protected] | 5.0 | 44.88% | 2001-01-09 | 2026-04-16 |
| CVE-2000-0980 | NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network. | [email protected] | 5.0 | 7.34% | 2000-12-19 | 2026-04-16 |
| CVE-2000-0979 | File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability. | [email protected] | 6.4 | 11.62% | 2000-12-19 | 2026-04-16 |
| CVE-2000-1003 | NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash. | [email protected] | 2.6 | 9.56% | 2000-12-11 | 2026-04-16 |
| CVE-2000-0742 | The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka the "Malformed IPX Ping Packet" vulnerability. | [email protected] | 5.0 | 19.46% | 2000-10-20 | 2026-04-16 |
| CVE-2000-1079 | Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram. | [email protected] | 7.5 | 20.99% | 2000-08-29 | 2026-04-16 |
| CVE-2000-0612 | Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table. | [email protected] | 5.0 | 15.28% | 2000-06-29 | 2026-04-16 |
| CVE-1999-0590 | A system does not present an appropriate legal message or warning to a user who is accessing it. | [email protected] | 10.0 | 10.34% | 2000-06-01 | 2026-04-16 |
| CVE-2000-0404 | The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability. | [email protected] | 5.0 | 24.31% | 2000-05-25 | 2026-04-16 |
| CVE-2000-0305 | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. | [email protected] | 7.8 | 40.97% | 2000-05-19 | 2026-04-16 |
| CVE-2000-0347 | Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name. | [email protected] | 5.0 | 36.32% | 2000-05-02 | 2026-04-16 |