CVE-1999-0994: Microsoft Windows Nt

Medium severity, CVSS 5.0. EPSS: 7.1% chance of exploitation in the next 30 days.

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.

Affected products

• Microsoft Windows Nt: version 4.0 only

Published 1999-12-16. Last modified 2026-06-16.