CVE-1999-1317: Microsoft Windows Nt

Medium severity, CVSS 4.6. EPSS: 1.8% chance of exploitation in the next 30 days.

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.

Affected products

• Microsoft Windows Nt: up to and including 4.0

Published 1999-12-31. Last modified 2026-06-16.