# Microsoft Windows NT vulnerabilities Source: https://junglewise.ai/threats/technologies/windows-nt Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/windows-nt.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 35 vulnerabilities in Microsoft Windows NT: 0 in the last 7 days and 0 in the last 90 days, 3 of them critical and 1 exploited in the wild. The most recent, CVE-2026-42980, was published on 9 June 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 35 (3 critical, 1 exploited in the wild) ## About Microsoft Windows NT Operating system kernel and core system software for IBM-compatible computers. ## Latest Microsoft Windows NT vulnerabilities - [CVE-2026-42980: Microsoft Windows NT OS Kernel privilege escalation via integer underflow](https://junglewise.ai/threats/cve-2026-42980-microsoft-windows-nt-os-kernel-privilege-escalation-via-integer) (high, CVSS 7.8, published 9 Jun 2026) - [CVE-2026-42916: Microsoft Windows NT OS Kernel privilege escalation via integer underflow](https://junglewise.ai/threats/cve-2026-42916-microsoft-windows-nt-os-kernel-privilege-escalation-via-integer) (high, CVSS 7.8, published 9 Jun 2026) - [CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2004-0210-microsoft-windows-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-1999-1361: Microsoft Windows NT WINS denial of service via malformed packets](https://junglewise.ai/threats/cve-1999-1361-microsoft-windows-nt-wins-denial-of-service-via-malformed-packets) (medium, CVSS 6.4, published 9 May 1998) - [CVE-1999-0225: Microsoft Windows NT denial of service in SMB logon request](https://junglewise.ai/threats/cve-1999-0225-microsoft-windows-nt-denial-of-service-in-smb-logon-request) (medium, CVSS 5, published 14 Feb 1998) - [CVE-1999-0258: Microsoft Windows TCP/IP stack denial of service in IP fragmentation](https://junglewise.ai/threats/cve-1999-0258-microsoft-windows-tcp-ip-stack-denial-of-service-in-ip) (medium, CVSS 5, published 13 Feb 1998) - [CVE-1999-0256: War FTP buffer overflow allows remote command execution](https://junglewise.ai/threats/cve-1999-0256-war-ftp-buffer-overflow-allows-remote-command-execution) (high, CVSS 7.5, published 1 Feb 1998) - [CVE-1999-1581: Microsoft Windows NT SNMP agent memory leak in snmp.exe](https://junglewise.ai/threats/cve-1999-1581-microsoft-windows-nt-snmp-agent-memory-leak-in-snmp-exe) (medium, CVSS 5, published 23 Dec 1997) - [CVE-1999-1217: Microsoft Windows NT privilege escalation via current directory in PATH](https://junglewise.ai/threats/cve-1999-1217-microsoft-windows-nt-privilege-escalation-via-current-directory-in) (medium, CVSS 4.6, published 25 Jul 1997) - [CVE-1999-1463: Microsoft Windows NT IP stack improper fragment reassembly](https://junglewise.ai/threats/cve-1999-1463-microsoft-windows-nt-ip-stack-improper-fragment-reassembly) (medium, CVSS 5, published 10 Jul 1997) - [CVE-1999-0153: Microsoft Windows 95/NT denial of service in NetBIOS via OOB data](https://junglewise.ai/threats/cve-1999-0153-microsoft-windows-95-nt-denial-of-service-in-netbios-via-oob-data) (medium, CVSS 5, published 1 Jul 1997) - [CVE-1999-0074: TCP/IP Stack sequential port allocation allows spoofing](https://junglewise.ai/threats/cve-1999-0074-tcp-ip-stack-sequential-port-allocation-allows-spoofing) (medium, CVSS 6.4, published 1 Jul 1997) - [CVE-1999-0275: Microsoft Windows NT DNS server denial of service via port 53 flooding](https://junglewise.ai/threats/cve-1999-0275-microsoft-windows-nt-dns-server-denial-of-service-via-port-53) (medium, CVSS 5, published 10 Jun 1997) - [CVE-1999-0227: Microsoft Windows NT denial of service in LSASS.EXE](https://junglewise.ai/threats/cve-1999-0227-microsoft-windows-nt-denial-of-service-in-lsass-exe) (medium, CVSS 5, published 1 Jun 1997) - [CVE-1999-1387: Microsoft Windows NT denial of service via malformed SMB packets](https://junglewise.ai/threats/cve-1999-1387-microsoft-windows-nt-denial-of-service-via-malformed-smb-packets) (medium, CVSS 5, published 2 Apr 1997) - [CVE-1999-0612: Generic finger service information disclosure](https://junglewise.ai/threats/cve-1999-0612-generic-finger-service-information-disclosure) (info, CVSS 0, published 1 Mar 1997) - [CVE-1999-0228: Microsoft Windows NT denial of service in RPC Locator](https://junglewise.ai/threats/cve-1999-0228-microsoft-windows-nt-denial-of-service-in-rpc-locator) (medium, CVSS 5, published 7 Feb 1997) - [CVE-1999-0504: Microsoft Windows NT default or blank password for local accounts](https://junglewise.ai/threats/cve-1999-0504-microsoft-windows-nt-default-or-blank-password-for-local-accounts) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0534: Microsoft Windows NT excessive user privileges assignment](https://junglewise.ai/threats/cve-1999-0534-microsoft-windows-nt-excessive-user-privileges-assignment) (medium, CVSS 4.6, published 1 Jan 1997) - [CVE-1999-0249: Microsoft Windows NT arbitrary command execution in RSHSVC](https://junglewise.ai/threats/cve-1999-0249-microsoft-windows-nt-arbitrary-command-execution-in-rshsvc) (high, CVSS 7.2, published 1 Jan 1997) - [CVE-1999-0503: Microsoft Windows NT guessable password for local accounts](https://junglewise.ai/threats/cve-1999-0503-microsoft-windows-nt-guessable-password-for-local-accounts) (high, CVSS 7.2, published 1 Jan 1997) - [CVE-1999-0575: Microsoft Windows NT missing security audit logging policy](https://junglewise.ai/threats/cve-1999-0575-microsoft-windows-nt-missing-security-audit-logging-policy) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0265: Microsoft Windows NT Denial of Service via ICMP Redirect](https://junglewise.ai/threats/cve-1999-0265-microsoft-windows-nt-denial-of-service-via-icmp-redirect) (medium, CVSS 5, published 1 Jan 1997) - [CVE-1999-0345: Microsoft Windows 95 and NT denial of service via Jolt ICMP attack](https://junglewise.ai/threats/cve-1999-0345-microsoft-windows-95-and-nt-denial-of-service-via-jolt-icmp-attack) (medium, CVSS 5, published 1 Jan 1997) - [CVE-1999-0496: Microsoft Windows NT privilege escalation in NtOpenProcessToken](https://junglewise.ai/threats/cve-1999-0496-microsoft-windows-nt-privilege-escalation-in-ntopenprocesstoken) (high, CVSS 7.2, published 1 Jan 1997) ## Most severe Microsoft Windows NT vulnerabilities - [CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2004-0210-microsoft-windows-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-1999-0535: Microsoft Windows NT insecure password policy configuration](https://junglewise.ai/threats/cve-1999-0535-microsoft-windows-nt-insecure-password-policy-configuration) (critical, CVSS 10, published 1 Jan 1997) - [CVE-1999-0572: Microsoft Windows NT Registry Editor file association vulnerability](https://junglewise.ai/threats/cve-1999-0572-microsoft-windows-nt-registry-editor-file-association) (critical, CVSS 9.3, published 1 Jan 1997) - [CVE-2026-42980: Microsoft Windows NT OS Kernel privilege escalation via integer underflow](https://junglewise.ai/threats/cve-2026-42980-microsoft-windows-nt-os-kernel-privilege-escalation-via-integer) (high, CVSS 7.8, published 9 Jun 2026) - [CVE-2026-42916: Microsoft Windows NT OS Kernel privilege escalation via integer underflow](https://junglewise.ai/threats/cve-2026-42916-microsoft-windows-nt-os-kernel-privilege-escalation-via-integer) (high, CVSS 7.8, published 9 Jun 2026) - [CVE-1999-0256: War FTP buffer overflow allows remote command execution](https://junglewise.ai/threats/cve-1999-0256-war-ftp-buffer-overflow-allows-remote-command-execution) (high, CVSS 7.5, published 1 Feb 1998) - [CVE-1999-0519: Microsoft NetBIOS and SMB null or default password on network shares](https://junglewise.ai/threats/cve-1999-0519-microsoft-netbios-and-smb-null-or-default-password-on-network) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0575: Microsoft Windows NT missing security audit logging policy](https://junglewise.ai/threats/cve-1999-0575-microsoft-windows-nt-missing-security-audit-logging-policy) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0504: Microsoft Windows NT default or blank password for local accounts](https://junglewise.ai/threats/cve-1999-0504-microsoft-windows-nt-default-or-blank-password-for-local-accounts) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0511: Generic Operating System IP forwarding enabled on non-router host](https://junglewise.ai/threats/cve-1999-0511-generic-operating-system-ip-forwarding-enabled-on-non-router-host) (high, CVSS 7.5, published 1 Jan 1997) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows): 2,362 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities - [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft Windows NT vulnerabilities", https://junglewise.ai/threats/technologies/windows-nt, 11 November 2026.