1251 matches found
CVE-2026-39666
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in telepathy Hello Bar Popup Builder hellobar allows DOM-Based XSS.This issue affects Hello Bar Popup Builder: from n/a through = 1.5.1...
Windows Hello Biometric Authentication
The vulnerability of the biometric authentication function of the Windows Hello operating system relates to insufficient validation of input data. Exploiting this vulnerability could allow a hacker to circumvent existing security restrictions...
SUSE SLED15: himmelblau / himmelblau-sshd-config / libnss_himmelblau2 / etc (SUSE-SU-2026:1361-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1361-1 advisory. Update to version 2.3.9+git0.a9fd29b; jscPED-14511: - CVE-2026-34397: Fix LPE due to name collision during NSS...
CVE-2026-27906
Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-27928
Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network...
Windows Hello Biometric Authentication
The vulnerability of the biometric authentication function of the Windows Hello operating system lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...
EUVD-2026-22481
Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-22444
Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-27928
Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-27906
Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-27928 Windows Hello Security Feature Bypass Vulnerability
...
CVE-2026-27928 Windows Hello Security Feature Bypass Vulnerability
...
CVE-2026-27928
CVE-2026-27928 is a Windows Hello security feature bypass vulnerability. The initial sources describe improper input validation in Windows Hello that allows an unauthenticated attacker to bypass a security feature over a network (attack vector: network; user interaction: none). The CVSS 3.1 base ...
CVE-2026-27906
Summary: CVE-2026-27906 (Windows Hello) is a local security feature bypass caused by improper input validation, enabling an authenticated user with high privileges to bypass a security feature. The vulnerability affects Windows Hello components and has an indicative CVSSv3.1 base score of 4.4 (At...
CVE-2026-27906 Windows Hello Security Feature Bypass Vulnerability
...
CVE-2026-27906 Windows Hello Security Feature Bypass Vulnerability
...
Windows Hello Security Feature Bypass Vulnerability
Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally...
Windows Hello Security Feature Bypass Vulnerability
Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-32768
Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description Improper input validation allows an authorized attacker to bypass a security feature locally, which can affect the system. Recommendations At the moment, there is no information about a...
Microsoft Windows Hello 输入验证错误漏洞
Microsoft Windows Hello is a biometric login method provided by the American company Microsoft. It allows users to log in using their face, fingerprint, or PIN. There is an input validation vulnerability in Microsoft Windows Hello. Attackers can exploit this vulnerability to bypass certain...