Windows Hello vulnerabilities

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

An uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

A use-after-free vulnerability in Windows Hello allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

A race condition in Windows Hello allows an authorized attacker to elevate privileges locally.

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Double free in Windows Hello allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally. The vulnerability relates to incorrect checking of input data in the authentication mechanism.

An incorrect privilege assignment vulnerability in Windows Hello allows an unauthorized attacker to perform tampering locally.

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

Security feature bypass vulnerability in Windows Hello. An attacker could bypass authentication mechanisms.

A vulnerability in Windows Hello allows a security feature bypass. An attacker could exploit this flaw to bypass authentication mechanisms.