Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/02 8:17 p.m.•11 views

CVE-2026-75136

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

6.9CVSS0.0016EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/02 7:15 p.m.•19 views

CVE-2026-75136 UpSignOn < 7.19.0 Biometric Key Exposure via Windows PasswordVault

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

6.9CVSS5.9AI score0.0016EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/02 7:15 p.m.•26 views

CVE-2026-75136

UpSignOn for Windows versions prior to 7.19.0 contain an insecure credential storage flaw in the biometric unlock key managed via the Windows PasswordVault API. A local attacker running a standard process within the same Windows session can retrieve the key without triggering any authentication p...

6.9CVSS5.9AI score0.0016EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/02 7:15 p.m.•19 views

EUVD-2026-70261

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

6.9CVSS5.9AI score0.0016EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/02 7:15 p.m.•46 views

CVE-2026-75136 UpSignOn < 7.19.0 Biometric Key Exposure via Windows PasswordVault

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

6.9CVSS0.0016EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•6 views

CVE-2026-75136: Insufficiently Protected Credentials

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

6.9CVSS5.9AI score0.0016EPSS
SaveExploits0References2
Rows per page
Query Builder