howdy

Howdy предоставляет аутентификацию в стиле Windows Hello™ для Linux. Используйте встроенные ИК-излучатели и камеру в сочетании с распознаванием лиц, чтобы подтвердить свою личность. Благодаря центральной системе аутентификации PAM это работает везде, где обычно требуется пароль: при входе в...

Shwmae

Shwmae Shwmaeshuh-my는 DEF CON 32에서 "Abusing Windows Hello Without a Severed Hand" 발표의 일환으로 공개된 Windows Hello 악용 도구입니다. 이 도구의 목적은 권한 있는 사용자 컨텍스트에서 Windows Hello를 남용하는 것입니다. Shwmae Copyright C 2024 Shwmae enum 기본 동사 Windows Hello 보호기, 키 및 자격 증명 열거 sign Windows Hello로 보호된 인증서를 사용하여 데이터 서명 prt Rubeus...

ft9201-libfprint

ft9201-libfprint Поддержка отпечатков пальцев в Linux для USB-ридера Focal-systems FT9201 2808:93a9, продаётся как автономный Windows Hello-донгл в качестве драйвера для libfprint. Сенсор — крошечный оптический ридер 96×96. Встроенный в libfprint механизм сравнения плохо справляется с таким...

CVE-2026-81354

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-72980

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-69864

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69820

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69799

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69784

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69740

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69725

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69710

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73850

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-81354

CVE-2026-81354 is a heap-based buffer overflow in Windows Hello that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 8.2 (HIGH) with a changed scope, impacting confidentiality, integrity, and availability at high levels. Attack requirements...

CVE-2026-69784

CVE-2026-69784 is a use-after-free vulnerability in Windows Hello that allows an authorized local attacker to escalate privileges. The flaw is scored CVSS 8.8 (HIGH) with a scope change, yielding high impact to confidentiality, integrity, and availability. Attack requires low privileges, no user ...

EUVD-2026-73641

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73640

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73639

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69820

Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...

CVE-2026-69864

CVE-2026-69864 is a use-after-free vulnerability in Windows Hello , Microsoft's biometric authentication component, that allows a low-privileged local attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed s...