Every CVE Search/ Get API key

CVE-1999-1317

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic...

4.6 Medium

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the ?? object folder using a different case letter (upper or lower) to point to a different device.

Exploit likelihood

1.80%Down 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.6

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the ?? object folder using a different case letter (upper or lower) to point to a different device.

Record
CVE-1999-1317
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the ?? object folder using a different case letter (upper or lower) to point to a different device.

Record
CVE-1999-1317
Updated
2026-11-02
EUVDEUVD-1999-1298 No score

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the ?? object folder using a different case letter (upper or lower) to point to a different device.

Record
EUVD-1999-1298
Updated
2026-11-03
GitHub AdvisoriesGHSA-fgh9-68h7-45xw No score

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic...

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the ?? object folder using a different case letter (upper or lower) to point to a different device.

Record
GHSA-fgh9-68h7-45xw
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-1999-1317 is a medium vulnerability (CVSS 4.6) in Microsoft Windows Nt, published December 31, 1999. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. No source names a fixed version.

References

MoveEnter Open