CVE-2026-69864

CVE-2026-69864 is a use-after-free vulnerability in Windows Hello , Microsoft's biometric authentication component, that allows a low-privileged local attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed s...

CVE-2026-69725

CVE-2026-69725 is a double free vulnerability in Windows Hello that allows an authorized attacker with low privileges to achieve local privilege escalation . The flaw is scored CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and high impact to confidentiality, integrity, and avail...

EUVD-2026-73638

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69710

Windows Hello is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to elevate privileges locally. The vulnerability requires high privileges and has high attack complexity , but upon exploitation chan...

EUVD-2026-73635

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73633

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69799

CVE-2026-69799 is a race condition vulnerability in Windows Hello , where concurrent execution using a shared resource with improper synchronization allows an authorized local attacker to elevate privileges. The CVSS 3.1 score is 7.8 (HIGH) with a changed scope, indicating the attacker crosses a ...

EUVD-2026-73254

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-72980

CVE-2026-72980 affects Windows Hello on Microsoft Windows. The vulnerability is an uncontrolled search path element that allows an authorized, local attacker to bypass a security feature. The attack vector is local with low complexity and requires high privileges but no user interaction. The prim...

EUVD-2026-73072

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69740

Windows Hello contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The vulnerability is rated CVSS 8.8 (HIGH) with a changed scope, indicating the impact extends beyond the vulnerable component itself, resulting in high confidentiality, integrity, and av...

Windows Hello Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

Windows Hello Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

Windows Hello Elevation of Privilege Vulnerability

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

Windows Hello Security Feature Bypass Vulnerability

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

Windows Hello Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

Windows Hello Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...