By publication date
Exploited and new serious CVEs: October 1999
4 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
22Monitor | CVE-1999-0877Proof of concept | Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.microsoft · internet explorer · CWE-200 | Medium4.3 | — | 17.6% | Oct 1, 1999 |
34Monitor | CVE-2000-0327No exploit | Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cmicrosoft · virtual machine | High7.6 | — | 11.8% | Oct 21, 1999 |
24Monitor | CVE-1999-1234No exploit | LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDommicrosoft · windows nt | Medium5.0 | — | 13.3% | Oct 26, 1999 |
26Monitor | CVE-1999-1577Proof of concept | Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrarymicrosoft · internet explorer | Medium5.1 | — | 19.4% | Oct 31, 1999 |
- CVE-1999-087722Monitor
Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
MediumCVSS 4.3Proof of conceptEPSS 17%microsoft · internet explorerOct 1, 1999
- CVE-2000-032734Monitor
Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal c
HighCVSS 7.6No exploitEPSS 11%microsoft · virtual machineOct 21, 1999
- CVE-1999-123424Monitor
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDom
MediumCVSS 5.0No exploitEPSS 13%microsoft · windows ntOct 26, 1999
- CVE-1999-157726Monitor
Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary
MediumCVSS 5.1Proof of conceptEPSS 19%microsoft · internet explorerOct 31, 1999