328 matches found
howdy
Howdy provides Windows Hello™ style authentication for Linux. Use your built-in IR emitters and camera in combination with facial recognition to prove who you are. Using the central authentication system PAM, this works everywhere you would otherwise need your password: Login, lock screen, sudo,...
ft9201-libfprint
ft9201-libfprint Linux fingerprint support for the Focal-systems FT9201 USB reader 2808:93a9, sold as a standalone Windows Hello dongle, as a libfprint driver. The sensor is a tiny 96×96 optical reader. libfprint's built-in matcher does a poor job on an image that small, so this driver instead...
Shwmae
Shwmae Shwmae shuh-my is a Windows Hello abuse tool that was released during DEF CON 32 as part of the Abusing Windows Hello Without a Severed Hand talk. The purpose of the tool is to abuse Windows Hello from a privileged user context. Shwmae Copyright C 2024 Shwmae enum Default Verb Enumerate...
CVE-2026-83926
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-83907
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...
CVE-2026-83853
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-83849
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally...
CVE-2026-83790
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-83740
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-70280
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-83907
A vulnerability in Windows Hello allows an authorized attacker to disclose sensitive system information locally. The issue is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). The impact involves a high level of confidentiality loss, with a CV...
CVE-2026-83790
A Use after free vulnerability in Windows Hello allows an authorized attacker to achieve local privilege escalation . The issue is classified with a High base severity score of 7.0. While specific technical component details or exploit links are not provided in the documents, the vulnerability is...
CVE-2026-83926
A security vulnerability in Windows Hello was identified involving improper certificate validation (CWE-295). This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability carries a Medium severity rating with a CVSS 3.1 score of 4.4. No specific exploit details ...
CVE-2026-83853
A Use after free vulnerability exists in Windows Hello , which allows an authorized attacker to achieve local privilege escalation . The impact is classified as high regarding confidentiality, integrity, and availability. No specific exploit details or in-the-wild exploitation information are pro...
CVE-2026-83849
An out-of-bounds read vulnerability exists in Windows Hello , which allows an authorized attacker to disclose information locally . The vulnerability's confidentiality impact is rated as high, while integrity and availability are unaffected. No specific exploit code or in-the-wild exploitation de...
CVE-2026-83740
A Use after free vulnerability in Windows Hello allows an authorized attacker to perform a local elevation of privilege . While the specific component or file is not detailed in the provided documents, the vulnerability has a CVSS 3.1 base score of 7.0 (High) . No specific exploit information or ...
CVE-2026-70280
A Windows Hello security feature bypass vulnerability exists due to incorrect authorization . This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-863 and has a CVSS 3.1 base score of 4.4 (Medium) , indicating high confidentiality ...
Windows Hello Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...