CVE-2005-4696: Microsoft Windows XP

Low severity, CVSS 2.1. EPSS: 3.9% chance of exploitation in the next 30 days.

The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access the network.

Affected products

• Microsoft Windows XP: any version

Published 2005-12-31. Last modified 2026-06-16.