CVE-1999-0995

High

Published: 16/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

21.82%

97th percentile - higher than 97% of all known CVEs

Summary

Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operations, potentially leading to service availability interruptions.

Recommendation

It is recommended to update Windows NT to the latest version and monitor logs for attempts to exploit this vulnerability.

Original NVD description (English source)

Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."