Windows Me Microsoft Windows Me

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Microsoft Windows Me.

Recent Microsoft Windows Me Security Advisories

Advisory Title Published
CVE-2026-69891 CVE-2026-69891 Windows Media Elevation of Privilege Vulnerability September 8, 2026
CVE-2026-83997 CVE-2026-83997 Windows Message Queuing Remote Code Execution Vulnerability September 8, 2026
CVE-2026-68887 CVE-2026-68887 Windows Message Queuing Queue Manager Denial of Service Vulnerability September 8, 2026
CVE-2026-69579 CVE-2026-69579 Windows Message Queuing Remote Code Execution Vulnerability September 8, 2026
CVE-2026-69511 CVE-2026-69511 Microsoft Windows Media Foundation Remote Code Execution Vulnerability September 8, 2026
CVE-2026-72932 CVE-2026-72932 Windows Message Queuing Queue Manager Information Disclosure Vulnerability September 8, 2026
CVE-2026-62706 CVE-2026-62706 Microsoft Windows Media Foundation Remote Code Execution Vulnerability September 8, 2026
CVE-2026-69386 CVE-2026-69386 Microsoft Windows Media Foundation Remote Code Execution Vulnerability September 8, 2026
CVE-2026-62744 CVE-2026-62744 Microsoft Windows Media Foundation Remote Code Execution Vulnerability September 8, 2026
CVE-2026-69645 CVE-2026-69645 Windows Message Queuing Elevation of Privilege Vulnerability September 8, 2026

By the Year

In 2026 there have been 0 vulnerabilities in Microsoft Windows Me.




Year Vulnerabilities Average Score
2026 0 0.00

It may take a day or so for new Windows Me vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Microsoft Windows Me Security Vulnerabilities

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors
CVE-2008-4609 - October 20, 2008

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.

Configuration

Internet Explorer 5.01, 5.5, and 6
CVE-2005-0053 - May 02, 2005

Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may
CVE-2004-0214 - November 03, 2004

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page
CVE-2004-0839 - August 18, 2004

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".

Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x
CVE-2003-1048 - July 27, 2004

Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.

The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which
CVE-2002-0862 - October 04, 2002

The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Microsoft Windows Me or by Microsoft? Click the Watch button to subscribe.

Microsoft
Vendor

subscribe