328 matches found
CVE-2026-72980: Uncontrolled Search Path Element
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-69799: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69820: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69864: Use After Free
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69725: Double Free
Double free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69740: Use After Free
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-81354: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87727
Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A race condition occurs in Windows Hello due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race condition...
PT-2026-87683
Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A double free issue in Windows Hello allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location twice,...
PT-2026-87670
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69710: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87891
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...
PT-2026-87717
Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A use-after-free condition in Windows Hello allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...
PT-2026-87765
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87693
Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A use-after-free condition in Windows Hello allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...
CVE-2026-61928
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...
EUVD-2026-56333
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...
CVE-2026-61928
An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...
