Lucene search
+L

291 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-69725: Double Free

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-87717

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A use-after-free condition in Windows Hello allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

8.8CVSS6.7AI score0.00333EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-87693

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A use-after-free condition in Windows Hello allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

8.8CVSS6.7AI score0.00333EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-87742

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

8.2CVSS5.9AI score0.00348EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-87727

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A race condition occurs in Windows Hello due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race condition...

7.8CVSS5.6AI score0.00202EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•29 views

PT-2026-87765

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-87891

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

4.4CVSS5.7AI score0.00574EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-87670

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

7.5CVSS5.7AI score0.00211EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-69784: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

8.8CVSS6.1AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•5 views

CVE-2026-69864: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-69710: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

7.5CVSS5.7AI score0.00211EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-69799: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00202EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-72980: Uncontrolled Search Path Element

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

5.5CVSS5.6AI score0.00574EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-69740: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

8.8CVSS6.1AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-69820: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

8.2CVSS6AI score0.00348EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-81354: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

8.2CVSS7.7AI score0.00348EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88056

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

8.2CVSS7.7AI score0.00348EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-87683

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A double free issue in Windows Hello allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location twice,...

7.8CVSS6AI score0.00333EPSS
SaveExploits0References5
NVD
NVD
•added 2026/08/11 5:18 p.m.•14 views

CVE-2026-61928

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...

5.5CVSS0.00226EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/11 5:03 p.m.•17 views

CVE-2026-61928 Windows Hello Tampering Vulnerability

...

5.5CVSS5.8AI score0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder