CVE-1999-0886

CVE-1999-0886 describes a critical privilege escalation vulnerability in Microsoft Windows NT, where the RASMAN service's security descriptor allows authenticated users to redirect its location through the Service Control Manager. This flaw carries a CVSS score of 9.0 (HIGH), indicating a network-exploitable vulnerability with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an exploit for this vulnerability (EDB-19502) is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.