Lucene search
+L

248 matches found

RedhatCVE
RedhatCVE
added 2025/04/10 7:49 p.m.23 views

CVE-2025-26635

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

6.5CVSS7AI score0.01472EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.15 views

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to insufficient detection or processing of adversarial input anomalies. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

5.1CVSS7.6AI score0.00549EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.13 views

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

8.5CVSS7.5AI score0.01472EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/04/09 12:00 a.m.49 views

Microsoft Windows Hello Security Feature Bypass Vulnerability (CNVD-2025-07780)

Microsoft Windows Hello is a more personalized and secure way to sign in to your Windows device. A security feature bypass vulnerability exists in Microsoft Windows Hello, which can be exploited by an attacker to bypass certain features...

6.5CVSS8.1AI score0.01472EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/08 6:15 p.m.5 views

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

5.1CVSS7.3AI score0.00549EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/08 6:15 p.m.24 views

CVE-2025-26644

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

5.1CVSS0.00549EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/08 6:15 p.m.16 views

CVE-2025-26635

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

6.5CVSS0.01472EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/08 6:15 p.m.4 views

CVE-2025-26635

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

6.5CVSS7.3AI score0.01472EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/08 5:23 p.m.18 views

CVE-2025-26644 Windows Hello Spoofing Vulnerability

...

5.1CVSS7.2AI score0.00549EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/08 5:23 p.m.38 views

CVE-2025-26644 Windows Hello Spoofing Vulnerability

...

5.1CVSS0.00549EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/08 5:23 p.m.155 views

CVE-2025-26644

CVE-2025-26644 affects Windows Hello by allowing local spoofing due to inadequate handling of adversarial input perturbations. Microsoft documents a Windows Hello security fix path via monthly updates (e.g., KB5055528 for Windows 11 22621/22631; KB5055519 for older Windows builds) that enforces v...

5.1CVSS7AI score0.00549EPSS
SaveExploits0References1Affected Software8
Vulnrichment
Vulnrichment
added 2025/04/08 5:23 p.m.34 views

CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability

...

6.5CVSS7.2AI score0.01472EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/08 5:23 p.m.130 views

CVE-2025-26635

CVE-2025-26635 describes a Windows Hello security feature bypass caused by weak authentication, enabling an authorized attacker to bypass a security feature over the network. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) yields a base score of 6.5 (Medium) with confidentiality and int...

6.5CVSS7.4AI score0.01472EPSS
SaveExploits0References1Affected Software8
Cvelist
Cvelist
added 2025/04/08 5:23 p.m.33 views

CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability

...

6.5CVSS0.01472EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/04/08 7:00 a.m.36 views

Windows Hello Spoofing Vulnerability

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...

5.1CVSS6.8AI score0.00549EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/04/08 7:00 a.m.28 views

Windows Hello Security Feature Bypass Vulnerability

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

6.5CVSS7.1AI score0.01472EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/04/08 12:00 a.m.9 views

PT-2025-15499

Name of the Vulnerable Software and Affected Versions: Windows Hello affected versions not specified Description: The issue concerns an automated recognition mechanism in Windows Hello that fails to adequately detect or handle adversarial input perturbations, allowing an unauthorized attacker to...

5.1CVSS8.4AI score0.00549EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/04/08 12:00 a.m.12 views

Microsoft Windows Hello 安全漏洞

Microsoft Windows Hello is a biometric-based login from Microsoft USA that allows you to sign in using your face, fingerprint or PIN. A security vulnerability exists in Microsoft Windows Hello. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and...

5.1CVSS8.1AI score0.00549EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/08 12:00 a.m.11 views

Microsoft Windows Hello 安全漏洞

Microsoft Windows Hello is a more personalized and secure way to sign in to your Windows device. A security feature bypass vulnerability exists in Microsoft Windows Hello, which can be exploited by an attacker to bypass certain features...

6.5CVSS6.7AI score0.01472EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/08 12:00 a.m.10 views

PT-2025-15493 · Microsoft · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: Windows Hello affected versions not specified Description: A security-feature bypass issue exists, allowing an authorized attacker to bypass a security feature. This could potentially affect the system. Recommendations: At the moment, there i...

8.5CVSS6.7AI score0.01472EPSS
SaveExploits0References8
Rows per page
Query Builder