CVE-2000-0168: Microsoft Windows 95

Medium severity, CVSS 5.0. EPSS: 19.6% chance of exploitation in the next 30 days.

Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.

Affected products

• Microsoft Windows 95: any version
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version

Published 2000-03-04. Last modified 2026-06-16.