CVE-1999-1291: Microsoft Windows 95

Medium severity, CVSS 5.0. EPSS: 13.3% chance of exploitation in the next 30 days.

TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.

Affected products

• Microsoft Windows 95: any version
• Microsoft Windows Nt: version 4.0 only

Published 1998-10-05. Last modified 2026-06-16.