Security
Headlines
HeadlinesLatestCVEs

Tag

#Windows Hello

CVE-2023-32018: Windows Hello Remote Code Execution Vulnerability

**According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?** An attacker must send the user a malicious file and convince them to open it.

Microsoft Security Response Center
#vulnerability#windows#rce#Windows Hello#Security Vulnerability
CVE-2023-32018: Windows Hello Remote Code Execution Vulnerability

**According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?** An attacker must send the user a malicious file and convince the user to open said file.

CVE-2022-35797: Windows Hello Security Feature Bypass Vulnerability

**What Security Feature could be bypassed by this vulnerability?** An attacker who successfully exploited this vulnerability could bypass the Windows Hello Facial Recognition security feature. **Where can I find more information about Windows Hello Face Authentication?** Please see Windows Hello Face Authentication for updated details.