Windows Hello Privilege Escalation

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-81354

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-72980

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-69864

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69820

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69799

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69784

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69740

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69725

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69710

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-81354

CVE-2026-81354 is a heap-based buffer overflow in Windows Hello that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 8.2 (HIGH) with a changed scope, impacting confidentiality, integrity, and availability at high levels. Attack requirements...

EUVD-2026-73850

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69784

CVE-2026-69784 is a use-after-free vulnerability in Windows Hello that allows an authorized local attacker to escalate privileges. The flaw is scored CVSS 8.8 (HIGH) with a scope change, yielding high impact to confidentiality, integrity, and availability. Attack requires low privileges, no user ...

EUVD-2026-73641

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69864

CVE-2026-69864 is a use-after-free vulnerability in Windows Hello , Microsoft's biometric authentication component, that allows a low-privileged local attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed s...

EUVD-2026-73639

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69820

Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...

EUVD-2026-73640

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73638

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69725

CVE-2026-69725 is a double free vulnerability in Windows Hello that allows an authorized attacker with low privileges to achieve local privilege escalation . The flaw is scored CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and high impact to confidentiality, integrity, and avail...