Vulnerability record · CVE-1999-0379 · published 22 February 1999

CVE-1999-0379: Microsoft backoffice resource kit vulnerability

Microsoft · Backoffice Resource Kit

Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.

7.5 CVSS 2.0 High EPSS 5.8% · top 7.1%

7.5CVSS 2.0 base score

5.8%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

16 Jun 2026Last modified by NVD

Description

Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Backoffice Resource Kit Microsoft

References

Link	Tags
http://www.osvdb.org/1019
http://www.securityfocus.com/bid/498
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-007
http://www.osvdb.org/1019
http://www.securityfocus.com/bid/498
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-007

Track CVE-1999-0379 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-1999-0379), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.