howdy

Howdy provides Windows Hello™ style authentication for Linux. Use your built-in IR emitters and camera in combination with facial recognition to prove who you are. Using the central authentication system PAM, this works everywhere you would otherwise need your password: Login, lock screen, sudo,...

ft9201-libfprint

ft9201-libfprint Linux fingerprint support for the Focal-systems FT9201 USB reader 2808:93a9, sold as a standalone Windows Hello dongle, as a libfprint driver. The sensor is a tiny 96×96 optical reader. libfprint's built-in matcher does a poor job on an image that small, so this driver instead...

Shwmae

Shwmae Shwmae shuh-my is a Windows Hello abuse tool that was released during DEF CON 32 as part of the Abusing Windows Hello Without a Severed Hand talk. The purpose of the tool is to abuse Windows Hello from a privileged user context. root@kitploit: Shwmae Copyright C 2024 Shwmae enum Default Ve...

CVE-2026-81354

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-72980

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-69864

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69820

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69799

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69784

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69740

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69725

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69710

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73850

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-81354

CVE-2026-81354 is a heap-based buffer overflow in Windows Hello that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 8.2 (HIGH) with a changed scope, impacting confidentiality, integrity, and availability at high levels. Attack requirements...

CVE-2026-69784

CVE-2026-69784 is a use-after-free vulnerability in Windows Hello that allows an authorized local attacker to escalate privileges. The flaw is scored CVSS 8.8 (HIGH) with a scope change, yielding high impact to confidentiality, integrity, and availability. Attack requires low privileges, no user ...

EUVD-2026-73641

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73640

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73639

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69820

Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...

CVE-2026-69864

CVE-2026-69864 is a use-after-free vulnerability in Windows Hello , Microsoft's biometric authentication component, that allows a low-privileged local attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed s...