Lucene search
+L

291 matches found

Cvelist
Cvelist
•added 2026/01/13 5:56 p.m.•38 views

CVE-2026-20852 Windows Hello Tampering Vulnerability

...

7.7CVSS0.00501EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/13 5:56 p.m.•66 views

CVE-2026-20852

CVE-2026-20852 is a Windows Hello privilege-assignment vulnerability that enables a locally authenticated attacker to tamper with local data due to incorrect privilege handling in the Windows Hello component. The issue is labeled as a local, high-severity problem with no user interaction required...

7.7CVSS7.2AI score0.00501EPSS
SaveExploits0References1Affected Software12
attackerkb
attackerkb
•added 2026/01/13 5:56 p.m.•8 views

CVE-2026-20804

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

7.7CVSS7.2AI score0.00501EPSS
SaveExploits0References2Affected Software16
Cvelist
Cvelist
•added 2026/01/13 5:56 p.m.•34 views

CVE-2026-20804 Windows Hello Tampering Vulnerability

...

7.7CVSS0.00501EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/13 5:56 p.m.•5 views

CVE-2026-20804 Windows Hello Tampering Vulnerability

...

7.7CVSS7.3AI score0.00501EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/13 5:56 p.m.•74 views

CVE-2026-20804

CVE-2026-20804 concerns an issue in Windows Hello where an incorrect privilege assignment can enable a local attacker to tamper with biometric authentication locally. The entry identifies the affected area as Windows Hello and the root cause as a privilege/permission misassignment, resulting in p...

7.7CVSS7.2AI score0.00501EPSS
SaveExploits0References1Affected Software12
Microsoft CVE
Microsoft CVE
•added 2026/01/13 4:00 p.m.•15 views

Windows Hello Tampering Vulnerability

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

7.7CVSS7.3AI score0.00501EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/01/13 4:00 p.m.•15 views

Windows Hello Tampering Vulnerability

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

7.7CVSS7.3AI score0.00501EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•3 views

CVE-2026-20804: Incorrect Privilege Assignment

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

7.7CVSS7.2AI score0.00501EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•2 views

CVE-2026-20852: Incorrect Privilege Assignment

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

7.7CVSS7.2AI score0.00501EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•23 views

Microsoft Windows Hello 安全漏洞

Microsoft Windows Hello is a biometric-based login from Microsoft Corporation USA that allows you to sign in using your face, fingerprint or PIN. A security vulnerability exists in Microsoft Windows Hello. An attacker could exploit this vulnerability to gain elevated privileges. The following...

7.7CVSS7.3AI score0.00501EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•12 views

PT-2026-2657

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw in Windows Hello’s privilege assignment can allow an attacker to perform tampering locally. This issue allows attackers to affect the system. Recommendations At the moment, there is no...

7.7CVSS7AI score0.00501EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•21 views

Microsoft Windows Hello 安全漏洞

Microsoft Windows Hello is a biometric-based login from Microsoft Corporation USA that allows you to sign in using your face, fingerprint or PIN. Microsoft Windows Hello has a security vulnerability. An attacker could exploit this vulnerability to tamper with information. The following products a...

7.7CVSS7.2AI score0.00501EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•12 views

PT-2026-2698

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A flaw in Windows Hello’s privilege assignment allows a local attacker to perform tampering on the system. This issue could allow unauthorized access and manipulation of the system...

7.7CVSS7AI score0.00501EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/01/09 12:38 p.m.•16 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS6.7AI score0.00412EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/11/12 12:00 a.m.•16 views

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems involves the transmission of critical information in plaintext. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

7.7CVSS8.2AI score0.00285EPSS
SaveExploits0References2Affected Software8
RedhatCVE
RedhatCVE
•added 2025/10/15 5:43 p.m.•8 views

CVE-2025-53139

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally...

7.7CVSS7.7AI score0.00285EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/14 5:15 p.m.•7 views

CVE-2025-53139

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally...

7.1CVSS7.6AI score0.00285EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/14 5:15 p.m.•10 views

CVE-2025-53139

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally...

7.7CVSS0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/14 5:00 p.m.•20 views

CVE-2025-53139 Windows Hello Security Feature Bypass Vulnerability

...

7.7CVSS0.00285EPSS
SaveExploits0References1
Rows per page
Query Builder