Windows 95 vulnerabilitiesRanked by how likely they are to be used.

Product3 versions
The short answer

Windows 95 is made by Microsoft. We track 57 published vulnerabilities in it, across 3 versions. None of them is on the list of flaws known to be exploited today. If you run Windows 95, keep it on a version the vendor still supports.

See the riskiest flaws

We keep watching the known-exploited list.

Known exploited

Which Windows 95 vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Windows 95's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Windows 95 flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 96%

    Land IP denial of service.

    CVSS5.0Published1 Dec 1997
  2. 75%

    File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte...

    CVSS6.4Published19 Dec 2000
  3. 73%

    Buffer overflow in War FTP allows remote execution of commands.

    CVSS7.5Published1 Feb 1998
  4. 46%

    Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the...

    CVSS5.0Published9 Jan 2001
  5. 38%

    Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the...

    CVSS7.8Published19 May 2000
  6. 35%

    Teardrop IP denial of service.

    CVSS5.0Published16 Dec 1997
  7. 35%

    Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request.

    CVSS7.5Published8 Mar 2002
  8. 26%

    Denial of service in various Windows systems via malformed, fragmented IGMP packets.

    CVSS7.8Published3 Jul 1999
  9. 23%

    Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certain GIF file, as demonstrated by Art.gif.

    CVSS7.1Published24 Jul 2007
  10. 22%

    Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping...

    CVSS5.0Published31 Dec 1999
Precursor Intelligence

Running Windows 95? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 57 published vulnerabilities listed under the name Windows 95, across 3 versions.

None of Windows 95's vulnerabilities is on the list of flaws known to be exploited today.

Create a Precursor Intelligence account and track Windows 95. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.