1126 matches found
CVE-2026-69799
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69784
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69740
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69725
Double free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69710
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
EUVD-2026-73850
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-81354
CVE-2026-81354 is a heap-based buffer overflow in Windows Hello that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 8.2 (HIGH) with a changed scope, impacting confidentiality, integrity, and availability at high levels. Attack requirements...
CVE-2026-69784
CVE-2026-69784 is a use-after-free vulnerability in Windows Hello that allows an authorized local attacker to escalate privileges. The flaw is scored CVSS 8.8 (HIGH) with a scope change, yielding high impact to confidentiality, integrity, and availability. Attack requires low privileges, no user ...
EUVD-2026-73641
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
EUVD-2026-73640
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
EUVD-2026-73639
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69820
Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...
CVE-2026-69864
CVE-2026-69864 is a use-after-free vulnerability in Windows Hello , Microsoft's biometric authentication component, that allows a low-privileged local attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed s...
EUVD-2026-73638
Double free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69725
CVE-2026-69725 is a double free vulnerability in Windows Hello that allows an authorized attacker with low privileges to achieve local privilege escalation . The flaw is scored CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and high impact to confidentiality, integrity, and avail...
EUVD-2026-73635
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69710
Windows Hello is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to elevate privileges locally. The vulnerability requires high privileges and has high attack complexity , but upon exploitation chan...
CVE-2026-69799
CVE-2026-69799 is a race condition vulnerability in Windows Hello , where concurrent execution using a shared resource with improper synchronization allows an authorized local attacker to elevate privileges. The CVSS 3.1 score is 7.8 (HIGH) with a changed scope, indicating the attacker crosses a ...