Lucene search
+L

211 matches found

CNNVD
CNNVD
added 2025/04/08 12:00 a.m.9 views

Microsoft Windows Hello 安全漏洞

Microsoft Windows Hello is a biometric-based login from Microsoft USA that allows you to sign in using your face, fingerprint or PIN. A security vulnerability exists in Microsoft Windows Hello. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and...

5.1CVSS8.1AI score0.00525EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/08 12:00 a.m.9 views

PT-2025-15493 · Microsoft · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: Windows Hello affected versions not specified Description: A security-feature bypass issue exists, allowing an authorized attacker to bypass a security feature. This could potentially affect the system. Recommendations: At the moment, there i...

8.5CVSS6.7AI score0.01407EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/04/08 12:00 a.m.10 views

Microsoft Windows Hello 安全漏洞

Microsoft Windows Hello is a more personalized and secure way to sign in to your Windows device. A security feature bypass vulnerability exists in Microsoft Windows Hello, which can be exploited by an attacker to bypass certain features...

6.5CVSS6.7AI score0.01407EPSS
SaveExploits0References2
Pen Test Partners Blog
Pen Test Partners Blog
added 2024/08/16 5:24 a.m.12 views

Insights and highlights from DEF CON 32

TL; DR Event Dates : August 8-11, 2024, in Las Vegas. PTP Presentations : Windows Hello : Our Ceri Coburn with Outsider Security's Dirk-Jan Mollema revealed vulnerabilities in biometric authentication. Maritime Security : Paul Brownridge discussed vulnerabilities in maritime systems and...

7.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/08/13 7:00 a.m.248 views

June 11, 2024—KB5039227 (OS Build 20348.2527)

None None...

9.8CVSS6.8AI score0.81729EPSS
SaveExploits20
Microsoft Secure
Microsoft Secure
added 2024/05/20 6:00 p.m.30 views

New Windows 11 features strengthen security to address evolving cyberthreat landscape

Ahead of the Microsoft Build 2024 conference, we announced a new class of Windows computers, Copilot+ PC. Alongside this exciting new class of PCs, we are introducing important security features and updates that make Windows 11 more secure for users and organizations and give developers the tools...

7AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/05/14 7:00 a.m.159 views

May 14, 2024—KB5037768 (OS Builds 19044.4412 and 19045.4412) - EXPIRED

None None...

8.8CVSS6.8AI score0.11471EPSS
SaveExploits4
Microsoft Secure
Microsoft Secure
added 2024/05/02 1:00 p.m.24 views

Microsoft introduces passkeys for consumer accounts

Ten years ago, Microsoft envisioned a bold future: a world free of passwords. Every year, we celebrate World Password Day by updating you on our progress toward eliminating passwords for good. Today, we’re announcing passkey support for Microsoft consumer accounts, the next step toward our vision...

7.2AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/04/09 7:00 a.m.104 views

April 9, 2024—KB5036894 (OS Build 22000.2899)

None None...

8.8CVSS6.8AI score0.45151EPSS
SaveExploits6
Microsoft KB
Microsoft KB
added 2024/04/09 7:00 a.m.309 views

April 9, 2024—KB5036909 (OS Build 20348.2402)

None None...

8.8CVSS6.8AI score0.62576EPSS
SaveExploits6
NVD
NVD
added 2024/04/05 9:15 p.m.18 views

CVE-2024-23592

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS6.3AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/05 8:46 p.m.28 views

CVE-2024-23592

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS6.5AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/05 8:46 p.m.83 views

CVE-2024-23592

CVE-2024-23592 describes an authentication bypass in Lenovo devices equipped with Synaptics fingerprint readers, enabling an attacker with physical access to replay fingerprints and bypass Windows Hello authentication. The vulnerability arises in the fingerprint authentication mechanism and could...

6.3CVSS6.8AI score0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/05 8:46 p.m.16 views

CVE-2024-23592

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

6.3CVSS7AI score0.0025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/05 12:00 a.m.8 views

PT-2024-19953 · Synaptics +2 · Synaptics Fingerprint Readers +2

Name of the Vulnerable Software and Affected Versions: Lenovo devices with Synaptics fingerprint readers affected versions not specified Description: An authentication bypass issue was reported in Lenovo devices with Synaptics fingerprint readers. This could allow an attacker with physical access...

6.3CVSS7AI score0.0025EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/04/05 12:00 a.m.11 views

Lenovo Fingerprint Reader 安全漏洞

Lenovo Fingerprint Reader is a fingerprint recognition module from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo Fingerprint Reader that originates from allowing bypassing Windows Hello authentication...

6.3CVSS6.7AI score0.0025EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2024/03/26 12:00 a.m.11 views

March 26, 2024—KB5035941 (OS Build 19045.4239) Preview

None None...

6.1AI score
SaveExploits0
Lenovo
Lenovo
added 2024/03/12 4:32 p.m.13 views

Fingerprint Reader Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/01/12 2:15 a.m.4 views

CVE-2024-0454

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

6.1CVSS5.7AI score0.00253EPSS
SaveExploits0References2
NVD
NVD
added 2024/01/12 2:15 a.m.31 views

CVE-2024-0454

ELAN Match-on-Chip FPR solution has design fault about potential risk of valid SID leakage and enumeration with spoof sensor. This fault leads to that Windows Hello recognition would be bypass with cloning SID to cause broken account identity. Version which is lower than...

6.1CVSS6.1AI score0.00253EPSS
SaveExploits0References2
Rows per page
Query Builder