Search/CVE-2001-0876
● CVE

CVE-2001-0876

VendormicrosoftProductwindows 98, windows 98se, windows xp, windows meDiscoveredDec 20, 2001UpdatedApr 16, 2026

Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.

CVSS v3.1
—
EPSS
49.5%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Dec 20, 2001
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026