CVE-2002-0699: Microsoft Windows 2000

Medium severity, CVSS 5.0. EPSS: 6.5% chance of exploitation in the next 30 days.

Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Me: any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version

Published 2002-10-04. Last modified 2026-06-16.