291 matches found
howdy
Howdy は Linux 向けに Windows Hello™ 形式の認証を提供します。内蔵の赤外線エミッターとカメラを顔認識と組み合わせて使用し、本人確認を行います。 中央認証システム PAM を利用して、パスワードが必要となるあらゆる場面（ログイン、ロック画面、sudo、su など）で機能します。 インストール Howdy は現在、Debian/Ubuntu、Arch Linux、Fedora、openSUSE 向けにパッケージ化され利用可能です。ご利用のディストリビューション向けに Howdy をパッケージ化することに興味があれば、遠慮なく Issue を開いてください。 注意:...
ft9201-libfprint
ft9201-libfprint Focal-systems FT9201 USB リーダー（2808:93a9、スタンドアロンの Windows Hello ドングル）向けの Linux 指紋認識サポート。libfprint ドライバとして提供します。 このセンサーは小さな 96×96 光学リーダーです。libfprint 組み込みのマッチャーでは、これほど小さな画像に対して性能が不十分であるため、本ドライバーは代わりに FocalTech 独自のマッチングエンジン （署名済み Windows ドライバに含まれる...
Shwmae
Shwmae Shwmae（シュー・マイ）は、DEF CON 32 で「Abusing Windows Hello Without a Severed Hand」というトークの一環として公開された Windows Hello 悪用ツールです。このツールの目的は、特権ユーザーコンテキストから Windows Hello を悪用することです。 Shwmae Copyright C 2024 Shwmae enum Default Verb Enumerate Windows Hello protectors, keys and credentials sign Sign data using...
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2026-81354
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-72980
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-69864
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69820
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69799
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69784
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69740
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69725
Double free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69710
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
EUVD-2026-73850
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-81354
CVE-2026-81354 is a heap-based buffer overflow in Windows Hello that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 8.2 (HIGH) with a changed scope, impacting confidentiality, integrity, and availability at high levels. Attack requirements...
EUVD-2026-73641
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69784
CVE-2026-69784 is a use-after-free vulnerability in Windows Hello that allows an authorized local attacker to escalate privileges. The flaw is scored CVSS 8.8 (HIGH) with a scope change, yielding high impact to confidentiality, integrity, and availability. Attack requires low privileges, no user ...
CVE-2026-69820
Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...