CVE-2025-26635

CVE-2025-26635 describes a Windows Hello security feature bypass caused by weak authentication, enabling an authorized attacker to bypass a security feature over the network. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) yields a base score of 6.5 (Medium) with confidentiality and int...

Windows Hello Spoofing Vulnerability

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

Windows Hello Security Feature Bypass Vulnerability

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

CVE-2025-26644: Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

PT-2025-15499

Name of the Vulnerable Software and Affected Versions: Windows Hello affected versions not specified Description: The issue concerns an automated recognition mechanism in Windows Hello that fails to adequately detect or handle adversarial input perturbations, allowing an unauthorized attacker to...

Microsoft Windows Hello 安全漏洞

Microsoft Windows Hello is a biometric-based login from Microsoft USA that allows you to sign in using your face, fingerprint or PIN. A security vulnerability exists in Microsoft Windows Hello. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and...

CVE-2025-26635: Weak Authentication

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

PT-2025-15493 · Microsoft · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: Windows Hello affected versions not specified Description: A security-feature bypass issue exists, allowing an authorized attacker to bypass a security feature. This could potentially affect the system. Recommendations: At the moment, there i...

Microsoft Windows Hello 安全漏洞

Microsoft Windows Hello is a more personalized and secure way to sign in to your Windows device. A security feature bypass vulnerability exists in Microsoft Windows Hello, which can be exploited by an attacker to bypass certain features...

Malicious code in gatsby-starter-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elementor-hello-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3dcf5dc0f88c313bcb767622f9a1e9e169099597b2e519c7c3df4bc25c8d799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A Bootiful Podcast: Johannes Bechberger, Java engineer at SAP

Hi, Spring fans! In this installment I talk to Johannes Bechberger, Java engineer working on profilers and their underlying technology in the SapMachine team at SAP. His work today comprises many open-source contributions and his blog, where he regularly writes on in-depth profiling and debugging...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: metacontroller, kubernetes-dashboard-metrics-scraper, kubernetes-event-exporter, kafka-proxy, falcosidekick, sftpgo-plugin-kms, swagger, nri-prometheus, k8sgpt, gke-gcloud-auth-plugin, oras, bank-vaults, metrics-server, kubewatch, sftpgo-plugin-pubsub, gobuster,...

CVE-2024-22590

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established...

Malicious code in pulumi-eks-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-863 Malicious code in pulumi-eks-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

Real Time Logic SharkSSL 安全漏洞

Real Time Logic SharkSSL is an embedded SSL/TLS client and server solution from Real Time Logic. A security vulnerability exists in Real Time Logic SharkSSL. An attacker could exploit this vulnerability to trigger a denial of service via a malformed Client-Hello message...

CVE-2024-53379: Buffer Copy without Checking Size of Input

Heap buffer overflow in the server site handshake implementation in Real Time Logic LLC's SharkSSL version from 05/05/24 commit 64808a5e12c83b38f85c943dee0112e428dc2a43 allows a remote attacker to trigger a Denial-of-Service via a malformed Client-Hello message...

CVE-2024-53379

Real Time Logic LLC's SharkSSL is vulnerable to a heap buffer overflow in the server-side handshake implementation. This flaw exists in versions from 05/05/24 (specifically commit 64808a5e12c83b38f85c943dee0112e428dc2a43 ) and is triggered by a remote attacker sending a malformed Client-Hello mes...

PT-2025-2962 · Sharkssl · Sharkssl

Name of the Vulnerable Software and Affected Versions: SharkSSL version from 05/05/24 commit 64808a5e12c83b38f85c943dee0112e428dc2a43 Description: A heap buffer overflow in the server site handshake implementation allows a remote attacker to trigger a Denial-of-Service via a malformed Client-Hell...