Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Windows Hello Tampering Vulnerability

🗓️ 11 Aug 2026 14:00:00Reported by MicrosoftType 
mscve
 mscve🔗 msrc.microsoft.com👁 2 Views

Windows Hello stores sensitive data in cleartext enabling local tampering by authorized attackers.

Related
Detection
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2026-61928
11 Aug 202619:01
–circl
cve
CVE		CVE-2026-61928
11 Aug 202617:03
–cve
cvelist
Cvelist		CVE-2026-61928 Windows Hello Tampering Vulnerability
11 Aug 202617:03
–cvelist
euvd
EUVD		EUVD-2026-56333
11 Aug 202617:03
–euvd
ncsc
NCSC		Vulnerabilities in Microsoft Windows
11 Aug 202619:47
–ncsc
nvd
NVD		CVE-2026-61928
11 Aug 202617:18
–nvd
vulnrichment
Vulnrichment		CVE-2026-61928 Windows Hello Tampering Vulnerability
11 Aug 202617:03
–vulnrichment
Vulners
Node
OR
microsoftwindows_server_2016Range<10.0.14393.9418
microsoftwindows_server_2016Range<10.0.14393.9418
microsoftwindows_10_1607Range<10.0.14393.9418x64
microsoftwindows_10_1607Range<10.0.14393.9418x86
microsoftwindows_11_26h1Range<10.0.28000.2704x64
microsoftwindows_11_26h1Range<10.0.28000.2704x64
microsoftwindows_server_2025Range<10.0.26100.33296
microsoftwindows_server_2025Range<10.0.26100.33222
microsoftwindows_11_24h2Range<10.0.26100.9168x64
microsoftwindows_11_24h2Range<10.0.26000.9106x64
microsoftwindows_11_24h2Range<10.0.26100.9168x64
microsoftwindows_11_24h2Range<10.0.26100.9106x64
microsoftwindows_11_23h2Range<10.0.22631.7517x64
microsoftwindows_11_23h2Range<10.0.22631.7517x64
microsoftwindows_11_25h2Range<10.0.26200.9168x64
microsoftwindows_11_25h2Range<10.0.26100.9106x64
microsoftwindows_11_25h2Range<10.0.26200.9168x64
microsoftwindows_11_25h2Range<10.0.26100.9106x64
microsoftwindows_server_2025Range<10.0.26100.33296
microsoftwindows_server_2025Range<10.0.26100.33222
microsoftwindows_10_22h2Range<10.0.19045.7663x86
microsoftwindows_10_22h2Range<10.0.19045.7663x64
microsoftwindows_10_22h2Range<10.0.19045.7663x64
microsoftwindows_10_21h2Range<10.0.19044.7663x64
microsoftwindows_10_21h2Range<10.0.19044.7663x64
microsoftwindows_10_21h2Range<10.0.19044.7663x86
microsoftwindows_server_2022Range<10.0.20348.5499
microsoftwindows_server_2022Range<10.0.20348.5440
microsoftwindows_server_2022Range<10.0.20348.5499
microsoftwindows_server_2022Range<10.0.20348.5440
microsoftwindows_server_2019Range<10.0.17763.9115
microsoftwindows_server_2019Range<10.0.17763.9115
microsoftwindows_10_1809Range<10.0.17763.9115x64
microsoftwindows_10_1809Range<10.0.17763.9115x86

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
11 Aug 2026 14:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 3.15.5
SSVC
Windows Hellocleartext storagelocal tamperingsensitive informationauthorized attacker
2