← Database

CVE-2026-27906

MEDIUM CVSS: 4.4 Published: 2026-04-14 Modified: 2026-06-17

Description

Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Affected Platforms

Microsoft Windows 10 21H2Microsoft Windows 11 24H2Microsoft Windows 10 22H2Microsoft Windows 11 26H1Microsoft Windows 11 25H2Microsoft Windows 11 23H2

Weakness Type

CWE-20

References