CVE-1999-1076

Medium CVSS 4.6

Published 1999-10-26 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-1999-1076, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.

Sources

NVD record for CVE-1999-1076

CVSS vector: AV:L/AC:L/Au:N/C:P/I:P/A:P