CVE-2002-1183: Microsoft Windows 98

High severity, CVSS 7.5. EPSS: 19.3% chance of exploitation in the next 30 days.

Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862).

Affected products

• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Nt: version 4.0 only

Published 2002-12-11. Last modified 2026-06-16.