← Database

CVE-2026-27928

HIGH CVSS: 8.7 Published: 2026-04-14 Modified: 2026-06-17

Description

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2022Microsoft Windows Server 2025Microsoft Windows Server 2022 23H2

Weakness Type

CWE-20

References