CVE-1999-0994

Medium

Published: 16/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.19%

94th percentile - higher than 94% of all known CVEs

Windows NT with SYSKEY reuses the keystream used for encrypting SAM password hashes, allowing an attacker to crack passwords.

An attacker may gain access to user passwords, potentially leading to account takeover and security breaches.

It is recommended to update the system to the latest version and implement stronger password security measures.

Original NVD description (English source)

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.