CVE-1999-1217: The PATH in Windows NT includes the current working directory (.), which could allow local users to gain pr...

Security readout for executives and security teams

Windows NT may search the current folder when looking for programs to run. A local user could place a lookalike program in a directory where a privileged user works, causing the privileged user to run the wrong program and potentially elevate the attacker’s privileges. Exposure appears limited to legacy Windows NT environments. The source bundle does not identify affected versions beyond Windows NT and lists affected vendor/product as n/a, so precise product and version scope is incomplete. Treat this as a legacy-environment hardening issue unless Windows NT remains in production, industrial, lab, or archival workflows. If such systems exist, prioritize containment and administrative workflow controls because the issue can turn local access into higher privilege. Mitigation focus: Inventory any remaining Windows NT systems or dependencies.; Check vendor or platform guidance for supported hardening options.; Remove current-directory PATH behavior where supported and operationally safe..

Prepared

Jun 30, 2026, 04:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.