Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/04/15 7:24 p.m.1 views

CVE-2026-32088

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack...

6.1CVSS6AI score0.00192EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/14 6:30 p.m.2 views

EUVD-2026-22524

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack...

6.1CVSS5.9AI score0.00192EPSS
Exploits0References2
NVD
NVD
added 2026/04/14 6:17 p.m.2 views

CVE-2026-32088

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack...

6.1CVSS0.00192EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/14 4:58 p.m.1 views

CVE-2026-32088

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack...

6.1CVSS6AI score0.00192EPSS
Exploits0References2Affected Software14
Vulnrichment
Vulnrichment
added 2026/04/14 4:58 p.m.1 views

CVE-2026-32088 Windows Biometric Service Security Feature Bypass Vulnerability

...

6.1CVSS5.8AI score0.00192EPSS
Exploits0References1
CVE
CVE
added 2026/04/14 4:58 p.m.19 views

CVE-2026-32088

CVE-2026-32088 describes a security feature bypass in the Windows Biometric Service. Affected component: Windows Biometric Framework service on Windows. The underlying root cause is not explicitly detailed in the provided documents. CVSS metrics indicate an attacker with physical access can explo...

6.1CVSS5.9AI score0.00192EPSS
Exploits0References1Affected Software11
Cvelist
Cvelist
added 2026/04/14 4:58 p.m.27 views

CVE-2026-32088 Windows Biometric Service Security Feature Bypass Vulnerability

...

6.1CVSS0.00192EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/14 2:0 p.m.4 views

Windows Biometric Service Security Feature Bypass Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack...

6.1CVSS6.4AI score0.00192EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.6 views

PT-2026-32814

CVE-2026-32088 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Biometric Service allows an unauthorized attacker to bypass a s… https://t.co/RESeqOUtu9...

6.1CVSS6.4AI score0.00192EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.9 views

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. The Microsoft Windows Biometric Service has a vulnerability that can lead to competitive conditions. Attackers can exploit this vulnerability to bypass certain features. The following products and...

6.1CVSS5.8AI score0.00192EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/04 1:57 a.m.4 views

CVE-2026-0017

In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.7CVSS6.1AI score0.00096EPSS
Exploits0References1
OSV
OSV
added 2026/03/02 7:16 p.m.8 views

CVE-2026-0017

In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.7CVSS5.9AI score0.00096EPSS
Exploits0References1
NVD
NVD
added 2026/03/02 7:16 p.m.8 views

CVE-2026-0017

In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.7CVSS0.00096EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/02 6:42 p.m.21 views

CVE-2026-0017

In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00096EPSS
Exploits0References1
CVE
CVE
added 2026/03/02 6:42 p.m.17 views

CVE-2026-0017

CVE-2026-0017 is tied to a logic error in BiometricService.java on the Android platform that could allow enabling fingerprint unlock and cause local elevation of privilege without additional execution privileges or user interaction. The vulnerability appears in the onChange path of BiometricServi...

7.7CVSS6.1AI score0.00096EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2026/03/01 12:0 a.m.7 views

ASB-A-444673089

In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.7CVSS6.1AI score0.00096EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-1995

Malware in sbrugna...

5.5CVSS5.5AI score0.00126EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:16 p.m.1 views

CVE-2020-0497

In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661...

5.5CVSS4.8AI score0.00126EPSS
Exploits0References1
OSV
OSV
added 2020/12/15 4:15 p.m.1 views

CVE-2020-0497

In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661...

5.5CVSS6.2AI score0.00126EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2020/12/15 4:15 p.m.4 views

CVE-2020-0497

In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661...

5.5CVSS5.6AI score0.00126EPSS
Exploits0References2
Rows per page
Query Builder