CVSS 3.1
5.1 mediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2025-26644
Medium (5.1) in microsoft. EPSS 0.5% chance of exploitation in the next 30 days.
Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
- CWE
- CWE-1039
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:windows_10_1809
- microsoft:windows_10_21h2
- microsoft:windows_10_22h2
- microsoft:windows_11_22h2
- microsoft:windows_11_23h2
- microsoft:windows_11_24h2
- microsoft:windows_server_2019
- microsoft:windows_server_2025