Vulnerabilities > CVE-2025-26644

047910
CVSS 5.1 - MEDIUM
Attack vector
LOCAL
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
local
high complexity
CWE-1039
NVD
Published: 2025-04-08
Updated: 2025-04-08

Summary

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.

Common Weakness Enumeration (CWE)

References